last executing test programs:

1m10.921234754s ago: executing program 1 (id=90):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/softnet_stat\x00')
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020)

1m10.850809257s ago: executing program 1 (id=92):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4084)

1m10.786565812s ago: executing program 1 (id=94):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, &(0x7f0000000080)=[{0xffffffffffffdff6, 0x20006, 0xfffffffffffffffc}], 0x1, 0x6, 0x0, 0x2, 0x7, 0x18})

1m10.620624317s ago: executing program 1 (id=97):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0)

1m10.61989823s ago: executing program 1 (id=98):
accept$alg(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)

1m10.293282315s ago: executing program 1 (id=104):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt(r0, 0x0, 0x13, 0x0, 0x0)

1m10.170032384s ago: executing program 32 (id=104):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt(r0, 0x0, 0x13, 0x0, 0x0)

11.358271766s ago: executing program 2 (id=679):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x150, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x21}, {@in=@multicast2, 0x0, 0x32}, @in=@multicast1, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0x2, 0x4, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "25cac5216d3c8af0aa763c9a18bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)

11.177099496s ago: executing program 2 (id=683):
r0 = memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x2)
fcntl$addseals(r0, 0x409, 0x27)

11.176714622s ago: executing program 2 (id=684):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

10.110112408s ago: executing program 2 (id=698):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c})

10.008260506s ago: executing program 2 (id=701):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/10, 0xa}, {0x0}], 0x2}, 0x44c7}], 0x1, 0x0, 0x0)

9.550126568s ago: executing program 2 (id=705):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x0, 0x7, "ff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xd)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0a, &(0x7f0000001040)="$eJzs3VFsXeddAPD/d2zHdoa2S9ek3aim2yJ1IWOZ7axNK0+iocZiLGtNHW9AeehN7IRLnOsr2+nSCrbw1AeQMEPihSEhoaGKh8kI7QGehoTEq4X2hpACjFKEkO7Dqr2gGp1zvxtfO04T6jhOmt9PSv7nnvP/zvnO952cc+757lECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj4xV86PTaeDroWAMC99NLsK2MTrv8A8FA56/s/AAAAAAAAAAAAAADc71IU8W6k+MYTnfRa9blr5EyzdeXq3NT07sVGU1VyoMov/4yMT5z84jPPnnquFz+4/N32qXh59uzp+otLl9vLCysrC/P1uVbz/NL8wh2vYa/ldzpeNUD98qUr8xcurNQnTpzctvhq7Z3hjx2tTZ4af/VIL3duanp6ti9ncOhDb/0mt3rD41AUcSFSXHr73dSIiCL23ha3OXb222i1E8ernZibmq52ZLHZaK2WC2d6DVFE1PoKvdBro3vQF3tSj7hWVr+s8PFy92bbjeXGucWF+kxjebW52lxqzaRubVOVXsRzKaIdEZ3hm1c3FEV8M1K89Z1OOhcRA712+Fz1YvDt61Pswz7egcGIqA1FbBQPQJ/dx4ajiO9Fim9/ayzO53atmu3piK+W8WjElTJej1gr42ciUnmAPBrx3i7HEw+WwSji9yPFjyc7ab7X99V55czX6l9uXVjqy+2dVx7468O9dJ+fm0aiiEZ1xu+kD3+zAwAAAADA/aeIP4oUT/7wWGpH/5his3WxfrZxbrH7VLj37L+eS21ubm7WUjeO5TiTYzvHtRzXc9woY2ytoFbk8jnO5NjOcS3H9Rw3cuzkWBvI5XOcybGd41qO6zlu5NjJsTaYy+c4M1jV7Fo7f17LcT3HjRw7gwfRTwAAAAAAAABwa6NRxNcjxdNfeL16rziq99I/MXnqlRO/0v/O+OO3WU+ZeyIi1os7eyf3UH51eCbNpHRA7xDTff/vd/P7f7930JUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOVBFFPBUpXv9+J0WKiHrEa9GN14cPunYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDdMJKKeC9S/MlXRqrPG0XEb0TE+5vvb0bE9fc377aD3mMAAAAAAAAA+AhKRbwRKZ56pZNqEXG19s7wx47WJk+Nv3pkIAYilSn9+S/Pnj1df3Hpcnt5YWVlYb4+12qeX5pfuNPNjZxptq5cnZua3pedua3Rfa7/6MiLS+03lpsXf2t11+WHR06fW1ldbpzffXGMRhFR759zvKrw3NR0VenFZqNVFZ1Jd1pjAAAAAAAAAB4GQ6mI9yPFW3/59o1x58HumP/gztzvfimiyNNTefz5xjB09buBj1e/G+hOf2Ly1K9OfLp/etch6+PVgHp9bmp6erZv9uDQzakjebtje9tl+pT9vxop/uDP6unJPG97/w/cyP3u72z197WdK7pFn/8/+n9bj/f6/6f75pXbTKmIv44UP/Nrj8eTVT0Px02/mch5X4kUv77+RM6LQ2XeU3n5I9XfIxeaiwtjZe7VSPH3V7bnPp1zP7mVO36n7fqgKPv/qUjx37+5fqNtcv/nHtjqtf7+//TOo2Pv/b/rv/9H+ubV8nZ/9u7sOhGx8sablxqLiwvLD+PEwP1RDRMmdp+Iawe39YM+M3EvlNf/r0eKv/vjf75xv5Ov/z8V1W3V1v3fT765df2f3Lmifbr+f7Jv3mS+GxkajBhZvdweeixiZOWNNz/fvNy4uHBxoXXy1PPPTow9Pz52cuhQ7+Zua2rnlm/6fvMwKvv/tyPF9/7tr+Kzed72+7/d7/8P71zRPvX/o33zDm+7X9nzrpP7/38jxT9O/SCO5XkfdP/f+/5/LN+E37g/36f+P9I3r/qO9/GIn+ubd+xIxEfuSxkAAADcZSkV8YM8njp2m/HUf4gUb/7Xz+e8dLTMeyEvr1V/j7y01Pr86cXFpfON1ca5xYX6bLtxfqEs+6NI0fmLJ3LZohpf7Y03d8d4t8Zi/ylSPP/LvdzuWGzv2dSjW7njZe6JSPGHL23P7T3HOLKVO1Hm/kukGH9199yjW7lfKHP/M1L85E/rvdzDZe6Xcu5jW7knzi8tzu9DtwAAAAAAwJ4MpSKejRR/e3Iw9Z5v38nvP2966L1Pv/97rG/e/D16X2XPjQoA97ny+n+svKr/wp/fGMvffv3fek+m//q/U///G3Cr6Q9z/a/dnd0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOikKGIpUnzjiU66Plx+7ho502xduTo3Nb17sdFUlRyo8ss/I+MTJ7/4zLOnnuvFDy5/t30qXp49e7r+4tLl9vLCysrCfH2u1Ty/NL9wx2vYa/mdjlcNUL986cr8hQsREydOblt8tfbO8MeO1iZPjb96pJc7NzU9PduXMzj0obd+k16/FjvmH4oi/idSXHr73fSvw3n5HtviNsfOfhuNIv4mIsqdmJuarnZksdlorZYLZ/oaotZX6IVeG92DvtiTesS1svplhY+Xuzfbbiw3zi0u1Gcay6vN1eZSayZ1a5uq9CKeSxHtiOgM37y6oShiKFK89Z3OaG9e1Q6fe2n2lbGJW1RiZGty5wF1jwxGRG0oYqN4APrsPjYcRTwTKb79rbH49+Fuu1bN9nTEV8t4NOJKGa9HrJXxMxGpPEAejXhvl+OJB8tgFPFIpPjxZCf9aDj3fXVeOfO1+pdbF5b6cnvnlQf++nAv3efnppEo4t3qjN9J/+HfMwAAAADAR0gRj0eKJ394LFXjgzfGFJuti/WzjXOL3cf6vWf/9Vxqc3Nzs5a6cSzHmRzbOa7luJ7jRo6dHGtFLp/jTI7tHNdyXM9xI8dOjrWBXD7HmRzbOa7luJ7jRo6dHGuDuXyOMzm2c1zLcT3HjRw7gwfZXwAAAAAAAAC7K6KIz0aK17/fSZvD3QHe16Ibr3sf6CPv/wIAAP//CqhQjw==")
truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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")
pwritev(r2, &(0x7f0000000700)=[{&(0x7f0000000280)="f5a5487b2cca", 0x6}], 0x1, 0x6, 0x7ff)

9.485642271s ago: executing program 33 (id=705):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x0, 0x7, "ff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xd)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0a, &(0x7f0000001040)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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")
pwritev(r2, &(0x7f0000000700)=[{&(0x7f0000000280)="f5a5487b2cca", 0x6}], 0x1, 0x6, 0x7ff)

3.619878253s ago: executing program 4 (id=753):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010, 0x4, 0x410, 0x2, 0x4, 0x1})

3.548738021s ago: executing program 4 (id=754):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socket$unix(0x1, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)

3.438179484s ago: executing program 4 (id=755):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000001e40)=ANY=[], 0x1, 0x60c4, &(0x7f0000001f80)="$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")
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')

2.760157213s ago: executing program 4 (id=762):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k1imSTJJUkuSZIkSW4JSZMcSUgMuSUNSch1SC5DSC4Tk8b9fr8kJEmTJCG5Jev/Ef7qVL9zzu/0O86neb6fz/5Yz+z9rP287/Ne1t6YbzoOqtageuV6RAT/FrzwRxIAxAJAPwC4BgACACgdVzru/P7sEpP+vZOwP9fDqVe6AnYlcf+zNu5/1sb9z9q4/1kb9z9r4/5nbdz/rI37z1hWtnFq/mt5y7ob3///66vzh3v4+/8vJLPE6C9Wl7i+E0DMP5vC/c/auP9/WcE/cxD3P2vj/mdVsVe6APZfgN//f0lNfh1m+8MDuf9ZG/efsazsSt9/vtIbRLL2c3ClX3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKGU/6i0+AVAFwKr3RdjDHGGGOMMcYY+/P4bFe6AsYYY4wxxhhjjP3fQxAgQUEAMZANYiE75AABAFdDLrgGInAtxMF1kBuuhzyQF/JBfoiHAlAQNBiwQBBCISgMUbgBisCNUBRugmJQHByUgAS4GUrCLVAKboXScBuUgduhLJSD8lAB7oCKcCdUgrugMtwNVaAqVIPqcA/UgHuhJtwHteB+qA0PQB14EOrCQ1APHob68Ag0gEehITwGjaAxNIGm0Ox/lf8idIWXoBt0hyToAT3hZegFvaEP9IV+8Ar0h1dhALwGyTAQBsHrMBjegCHwJgyFYTAc3oIRMBJGwWgYA2MhBcbBeHgbJsA7MBEmwWSYAqkwFabBuzAdZsBMeA9mwfswG+bAXJgHafABzIcFkA4fwkL4CDJgESyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXb4GHbAJ7ATdsFu+BT2wGf/Yv7Jv8vvhICAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2IxLIYOHSZgApbEW7AUlsLSWBrLYBksi+WwHFbAClgRK2IlrISVsTJWwSpYDavhPXgP9sCaWBNrYS2sjbUv3Z7CelgP62N9bIANsCE2xEbYCJtgE2yGzbA5NscW2AJbYStsja2xDbbBREzEttgW22E7bI/tsQN2wI7YETthZ+yc+WI2wJfwJeyOVUQP7Ik9sRcmZ+uDfbEvvoL98VV8FV/DZByIg/B1fB3fwCF4AofiMByOw7GiGImjcDSSGIspmILjcTxOwAk4ESfhJJyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4f/1X9j29alQziPCWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eit8gt8og8Ip/IJ+JFvCgoCgojjCARxgCAiIqoKCKKiKKiqCgmigknnEgQCaKkKClKiVKitLhNlBG3i7KinGjpKogKoqJo5SqJu0RlUVlUEVVFNVFdVBc1RA1RU9QUtUQtUVvUFnXEg6Ku6IF98GFxvjMNxEBsKAZhI9FYyIufYM3FEGwhWopW4kkxDIdiG9HcJYpnRFsxCtuJv4nR+JzoIMZiR/GC6CQ6iy7iRdFVtHDdRHcxEXuInmIK9hK9RR/RV0zHquI9nJW9mnhNJIuBYpB4XczDN8QQ8aYYKoaJ4eItMUKMFKPEaDFGjBUpYpwYL94WE8Q7YqKYJCaLKSJVTBXTxLtiupghZor3xCzxvpgt5oi5Yp5IEx+I+WKBSBcfioXiI5EhFonFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie3iY7FDfCJ2il1it/hU7BGfib3ic7FPfCH2iy9FpvhKHBBfi4PiG3FIfCsOi+/EEXFUHBPfi+PiB3FCnBSnxGlxRvwozoqfxDnhBUiUQkqpZCBjZDYZK7PLHPIqmVMGF5/da2WcvE7mltfLPDKvzCfzy3hZQBaUWhppJclQFpKFZVTeIIvIG2VReZMsJotLJ0vIBHmzLClvkaXkrbK0vE2WkbfLsrKcLC8ryDtkRXmnhMiFc1SRVWU1WV3eI5PgXllT3idryftlbfmArCMflHXlQ7KefFjWl4/IBvJR2VA+JhvJxrKJbCqbycdlc/mEbCFbylbySdlaPiXbyKdlonxGtpX+4kvkOdlBPi87yhdkJ9lZdpE/yXPSy26yu4QeIHvKl2Uv2Vv2kX1lP/mK7C9flQPkazJZDpSD5OtysHxDDpFvyqFymBwu35Ij5Eg5So6WY+RYmSLHyfHybTlBviMnyklyspwiU+VU2efiTDOl/If5b/9O/oCfz75BbpSb5Ga5RW6V2+R2+bHcIXfInXKn3C13yz1yj9wr98p9cp/cL/fLTJkpD8gD8qA8KA/JQ/KwPCyPyKPytPxeHpc/yBPypDwpT8sz8ow8e/E5AIVKKKmUClSMyqZiVXaVQ12lcqqrVS51jYqoa1Wcuk7lVterPCqvyqfyq3hVQBVUWhllFalQFVKFVVTdgBdfMKqYKq6cKqES1M3/Sr4qom5URdVNv8q/VF/SH9TXTDVTzVVz1UK1UK1UK9VatVZtVBuVqBJVW9VWtVPtVHvVXnVQHVRH1VF1Up1UF9VFdVVdVTfVTSWpJNVTvax6qd6qj+qr+qlXVH/VXw1QA1SySlaD1CA1WA1WQ9QQNVQNVcPVcDVCjVCj1Cg1Ro1RKSpFjVfj1QQ1QU1UE9VkNVmlqlQ1TU1T09V0NVPNVLPULDVbzVZz1VyVptLUfDVfpat0tVAtVBlqkVqklqglaplaplaoFWqVWqXWqDVqnVqnMtRGtVFtVpvVVrVVbVfb1Q61Q+1UO9VutVvtUXvUXrVX7VP71H61X2WqTHVAHVAH1UF1SB1Sh9VhdUQdUcfUMXVcHVcn1Al1Sp1SZ9QZdVadVefUufPLvkAEIlCBCmKCmCA2iA1yBDmCnEHOIFeQK4gEkSAuiAtyB9cHeYK8Qb4gfxAfFAgKBjowgQ3ExaZHgxuCIsGNQdHgpqBYUDxwQYkgIbg5KBncEpQKbg1KB7cFZYLbg7JBuaB8UCG4I6gY3BlUCu4KKgd3B1WCqkG1oHpwT1AjuDeoGdwX1AruD2oHDwR1ggeDusFDQb3g4aB+8EjQIHg0aBg8FjQKGgdNgqZBsz91fu9P5H3CddPddZLuoXvql3Uv3Vv30X11P/2K7q9f1QP0azpZD9SD9Ot6sH5DD9Fv6qF6mB6u39Ij9Eg9So/WY/RYnaLH6fH6bT1Bv6Mn6kl6sp6iU/VUPU2/q6frGXqmfk/P0u/r2XqOnqvn6TT9gZ6vF+h0/aFeqD/SGXqRXqyX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepverj/WO/QneqfepXfrT/Ue/Zneqz/X+/QXer/+Umfqr/QB/bU+qL/Rh/S3+rD+Th/RR/Ux/b0+rn/QJ/RJfUqf1mf0j/qs/kmf0/784v7817tRRpkYE2NiTazJYXKYnCanyWVymYiJmDgTZ3Kb3CaPyWPymXwm3sSbgqagOY8MmUKmkImaqCliipiipqgpZooZZ5xJMAmmpClpSplSprQpbcqYMqasKWvKm/LmDnOHudPcae4yd5m7zd2mqqlqqpvqpoapYWqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkmpgmpplpZpqb5qaFaWFamVamtWlt2pg2JtEkmramrWln2pn2pr3pYDqYjqaj6WQ6mS6mi+lquppupptJMkmmp+lpeplepo/pY/qZfqa/6W8GmAEm2SSbQWaQGWwGmyFmiBlqhpnh5xeqZqQZZUZ/O8aMNSkmxYw3480EM8FMNBPNZDPZpJpUM81MM9PNdDPTzDSzzCwz28w2c81ck2bSzHwz36SbdLPQLDQZJsMsNovNUrPULDfLzUqz0qw2q81aWGvWm/Vmo9loNpvNZqvZarab7WaH2WF2mp1mt9lt9pg9Zq/Za/aZfWa/2W8yTaY5YA6Yg+agOWQOmcPmsDlijphj5pg5bo6bE+aEOWVOmTMm78XvS29ibXabw15lc9qrbS57jf37OJ/Nb+NtAVvQapvH5v1VbKy1Re1Ntpgtbp0tYRPszb+Jy9pytrytYO+wFe2dttJv4hr2XlvT3mdr2fttdXvPr+La9gFbxz5q6yIC2Ma2vm1qG9hHbUP7mG1kG9smtqltbZ+ybezTNtE+Y9vaZ38Tz7cL7Eq7yq62a+xOu8uesqftQfuNPWN/tN1sd9vPvmL721ftAPuaTbYDfxMPt2/ZEXakHWVH2zF27G/iyXaKTbVT7TT7rp1uZ/wmTrMf2Fk23c62c+xcO+/n+HxN6fZDu9B+ZDNsAIvtErvULrPL7Yr/X+sSu86utxvsDvuJ3Wy32K12m91+aSFsd9nd9lO7x35mD9iv7T77hd1vD9lM+9XP8fnHd8h+aw/b7+wRe9Qes9/b4/YH9XPuyF4A9kf7vf3JnrPeAiEBSVIUUAxlo1jKTjnoKspJV1MuuoYidC3F0XWUm66nPJSX8lF+iqcCVJA0GbJEFFIhKkxRuoEulVeMipOjEpRAN1NJuoVK0a1Umm6jMnQ7laVyVJ4q0B1Uke6kSnQXVaa7qQpVpWpUne6hGnQv1aT7qBbdT7XpAapDD1Jdeojq0cNUnx6hBvQoNaTHqBE1pibUlJrR49ScnqAW1JJa0ZPUmp6iNvQ0JdIz1JaepXb0N2pPz1EHep460gvUiTpTF3qRutJL1I26UxL1oJ70MvWi3tSH+lI/eoX606s0gF6jZBpIg+h1Gkxv0BB6k4bSMBpOb9EIGkmjaDSNobGUQuNoPL1NE+gdmkiTaDJNoVSaStPoXZpOM2gmvUez6H2aTXNoLs2jNPqA5tMCSqcPaSF9RBm0iBbTElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDt9TDvoE9pJu2g3fUp76DPaS5/TPvqC9tOXlElf0QH6mg7SN3SIvvXd6Ts6QkfpGH1Px+kHOkEn6RSdpjP0I52ln+gceYIQQxHKUIVBGBNmC2PD7GGO8KowZ3h1mCu8JoyE14Zx4XVh7vD6ME+YN8wX5g/jwwJhwVCHJrQhhWFYKCwcRsMbwiLhjWHREMNiYfHQhSXChPDmsGR4S1gqvDUsHd4WlglvD8uG5cJH768Q3hFWDO8MK4V3hZXDu8MqYdWwWlg9vCesEd4b1gzvC2uF94elwgfCOuGDYd3wobBe+HBYP3wkbBA+GjYMHwsbhY3DJmHTsFn4eNg8fCJsEbYMW4VPhq3Dp8I24dNhYvhM2DZ89uf9Dyz44/1JYY+wZ/hy+HLo/X1ybnReNC36QXR+dEE0PfphdGH0o2hGdFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10fXRD1Pvq2cChE0465QIX47K5WJfd5XBXuZzuapfLXeMi7loX565zud31Lo/L6/K5/C7eFXAFnXbGWUcudIVcYRd1N7gi7kZX1N3kirnizrkSLsE1dc1cM9fcPeFauJaulXvSPemeck+5p93T7hnX1j3r2rm/ufbuOdfBPe+edy+4Tq6z6+JedF3duFwX3pNJrqfr6Xq5Xq6P6+P6uX6uv+vvBrgBLtklu0FukBvsBrshbogb6oa64W64G+FGuFFulBvjxrgUl+LGu/FugpvgJrqJbrKb7FJdqpvmprnpbrqrOOPCWWa72W6um+vSXJqb786vGdPdQrfQZbgMt9gtdkvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt9Nfc2FSt8ftdXvdPrfP7Xdfukz3lTvgvnYH3TfukPvWHXbfuSPuqDvmvnfH3Q/uhDvpTrnT7oz70Z11P7lzzruUyLjI+MjbkQmRdyITI5MikyNTIqmRqZFpkXcj0yMzIjMj70VmRd6PzI7MicyNzIukRT6IzI8siKRHPowsjHwUyYgsiiyOLIksjSyLeF9gc+gL+cI+6m/wRfyNvqi/yRfzxb3zJXyCv9mX9Lf4Uv5WX9rf5sv4231ZX86X94/5Rr6xb+Kb+mb+cd/cP+Fb+Ja+lX/St/ZP+Tb+aZ/on/Ft/bO+nf+bb++f8x38876jf8F38p19F/+i7+pf8t18d5/ke/ie/mXfy/f2fXxf38+/4vv7V/0A/5pP9gP9IP+6H+zf8EP8m36oH+aHx7zlR1y6RIaxPsWP8+P9236Cf8dP9JP8ZD/Fp/qpfpp/10/3M/xM/56f5d/3s/0cP9fP82n+Az/fL/Dp/kO/0H/kM/yiSzeV/XK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/x2/7Hf4T/xO/0uv9t/6vf4z/xe/7nf57/w+/2XPtN/5Q/4r/1B/40/5L/1h/13/og/6o/57/1x/4M/4U/6U/60P+N/9Gf9T/4c/581xhhjjLF/yrjLQ/HrPRdu5/f4nRzxi4N7AsDVW/Jn/nL/+RXl2jwXxr1FfOsIADzTvePDl7YqVZKSki4emyEhKDwH4NLfBJ0XA5fjRdAKnoJEaAklf7f+3qLzGfoH80dvA8jxi5xYuBxfnv9zAEz6nfkff3L4/DLhqbj/Yf45AEULX87JDpfjRdDq5/srLaHUH9Sft/kv64/97fzZv0gBaPGLnJxwOb5cfwI8Ac9C4q+OZIwxxhhjjDHGLugtyre/dP156V98/t71eby6nJMNLsf/6PqcMcYYY4wxxhhjV95znbs8/XhiYsv2//qg0v8q658eNIT/q5l58LsD7wEu/UQBwL85IcD5gfxPPopN/5FzJV986/z9rqWnfQD/Ha38MwZX+IOJMcYYY4wx9qe7vOj/9c/VlSqIMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLgv4Tv07sSj9GxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Er7fwEAAP//nXwDKg==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

2.589946305s ago: executing program 4 (id=766):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0x10000000000f, &(0x7f0000006680))
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48)

1.438278156s ago: executing program 0 (id=772):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3, 0x25a, &(0x7f0000000240)="$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")
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x2018, 0x0)

1.369337332s ago: executing program 0 (id=775):
sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x20000001)
syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000e1338720402068829527010203010902240001020000100904d30002be79e8000905040200020500ff090582"], 0x0)

719.819105ms ago: executing program 3 (id=789):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='numa_maps\x00')
lseek(r0, 0x0, 0x1)

719.614587ms ago: executing program 3 (id=790):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000240)={[{@nombcache}, {@usrjquota}, {@user_xattr}, {@norecovery}, {@auto_da_alloc}, {@usrquota}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')

586.920919ms ago: executing program 3 (id=791):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@appraise}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
truncate(&(0x7f0000000000)='./file1\x00', 0x5e00)

519.955081ms ago: executing program 4 (id=792):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000200)=0xffffffff)

417.482248ms ago: executing program 34 (id=792):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000200)=0xffffffff)

364.818724ms ago: executing program 3 (id=794):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

258.905018ms ago: executing program 3 (id=795):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

195.892114ms ago: executing program 3 (id=796):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0)
sendfile(r0, r1, 0x0, 0xfffe80)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000000)='./file0\x00', 0x14, &(0x7f0000000040)=ANY=[], 0x5, 0xf0f, &(0x7f0000001e00)="$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")
truncate(&(0x7f00000001c0)='./file1\x00', 0x6)

116.295214ms ago: executing program 0 (id=797):
r0 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

60.125397ms ago: executing program 0 (id=798):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0)

144.876µs ago: executing program 0 (id=799):
move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)

0s ago: executing program 0 (id=800):
syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109027f23b5a0fda00909040000000101bc6a0a2401f7ff0702010209240303010103030b0524050602090401000001020000090416010101020000090501090004f7c803072501000405000904020000010200000904020101010200000b24020313010801555de507240101c005000905860950"], 0x0)

kernel console output (not intermixed with test programs):

riteback wb_workfn (flush-7:1)
[   73.208942][   T26] Call Trace:
[   73.208947][   T26]  <TASK>
[   73.208952][   T26]  dump_stack_lvl+0x189/0x250
[   73.208970][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.208984][   T26]  ? __pfx_queue_work_on+0x10/0x10
[   73.208996][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   73.209009][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   73.209030][   T26]  f2fs_handle_critical_error+0x37c/0x540
[   73.209047][   T26]  f2fs_write_end_io+0x886/0xb60
[   73.209075][   T26]  __submit_merged_bio+0x27a/0x6a0
[   73.209092][   T26]  __submit_merged_write_cond+0x255/0x530
[   73.209121][   T26]  f2fs_write_data_pages+0x261d/0x3000
[   73.209158][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   73.209182][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   73.209222][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   73.209243][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[   73.209255][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[   73.209271][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   73.209287][   T26]  ? __lock_acquire+0xab9/0xd20
[   73.209306][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   73.209320][   T26]  do_writepages+0x32e/0x550
[   73.209335][   T26]  ? reacquire_held_locks+0x127/0x1d0
[   73.209345][   T26]  ? writeback_sb_inodes+0x384/0x1010
[   73.209364][   T26]  __writeback_single_inode+0x145/0xff0
[   73.209377][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[   73.209393][   T26]  writeback_sb_inodes+0x6c7/0x1010
[   73.209423][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   73.209482][   T26]  ? rcu_is_watching+0x15/0xb0
[   73.209501][   T26]  wb_writeback+0x43b/0xaf0
[   73.209520][   T26]  ? queue_io+0x331/0x590
[   73.209534][   T26]  ? __pfx_wb_writeback+0x10/0x10
[   73.209552][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.209569][   T26]  wb_workfn+0x409/0xef0
[   73.209598][   T26]  ? __pfx_wb_workfn+0x10/0x10
[   73.209644][   T26]  ? __lock_acquire+0xab9/0xd20
[   73.209669][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   73.209692][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   73.209707][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[   73.209726][   T26]  process_scheduled_works+0xae1/0x17b0
[   73.209765][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[   73.209795][   T26]  worker_thread+0x8a0/0xda0
[   73.209833][   T26]  kthread+0x711/0x8a0
[   73.209849][   T26]  ? __pfx_worker_thread+0x10/0x10
[   73.209865][   T26]  ? __pfx_kthread+0x10/0x10
[   73.209880][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[   73.209893][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.209906][   T26]  ? __pfx_kthread+0x10/0x10
[   73.209920][   T26]  ret_from_fork+0x4bc/0x870
[   73.209939][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[   73.209961][   T26]  ? __switch_to_asm+0x39/0x70
[   73.209973][   T26]  ? __switch_to_asm+0x33/0x70
[   73.209986][   T26]  ? __pfx_kthread+0x10/0x10
[   73.210000][   T26]  ret_from_fork_asm+0x1a/0x30
[   73.210027][   T26]  </TASK>
[   73.210091][   T26] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   73.827637][ T6089] loop0: detected capacity change from 0 to 256
[   73.831585][ T6089] exfat: Deprecated parameter 'namecase'
[   73.835781][ T6089] exfat: Deprecated parameter 'namecase'
[   73.853928][ T6089] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   74.182175][ T6101] binder: 6100:6101 ioctl c0306201 2000000001c0 returned -14
[   74.324829][ T6097] loop1: detected capacity change from 0 to 32768
[   74.361175][ T6097] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   74.367335][ T5856] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   74.372053][ T6097] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[   74.376794][ T6097] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30
[   74.383786][ T6097] XFS (loop1): Ending clean mount
[   74.388966][ T6097] XFS (loop1): Quotacheck needed: Please wait.
[   74.394827][   T26] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1803 dinode
[   74.398843][   T26] XFS (loop1): Unmount and run xfs_repair
[   74.400735][   T26] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   74.403743][   T26] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[   74.406661][   T26] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   74.409802][   T26] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[   74.412685][   T26] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[   74.415846][   T26] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   74.419696][   T26] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[   74.422876][   T26] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[   74.425941][   T26] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[   74.436680][ T6097] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[   74.467395][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   74.470218][ T5854] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   74.512506][ T5854] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[   74.517716][ T5856] usb 1-1: Using ep0 maxpacket: 8
[   74.526085][ T5856] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   74.530634][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.543040][ T5856] usb 1-1: config 0 descriptor??
[   74.617370][   T10] usb 3-1: Using ep0 maxpacket: 16
[   74.625278][   T10] usb 3-1: config 4 has an invalid interface number: 51 but max is 0
[   74.629354][   T10] usb 3-1: config 4 has no interface number 0
[   74.632020][   T10] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[   74.636194][   T10] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   74.644657][   T10] usb 3-1: config 4 interface 51 has no altsetting 0
[   74.660833][   T10] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[   74.664728][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.669202][   T10] usb 3-1: Product: syz
[   74.672652][   T10] usb 3-1: Manufacturer: syz
[   74.674731][   T10] usb 3-1: SerialNumber: syz
[   74.682294][ T6103] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   74.685363][ T6103] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   74.763136][ T5856] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   74.803008][ T6119] loop1: detected capacity change from 0 to 4096
[   74.848175][ T6119] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   74.858556][ T6119] input: syz0 as /devices/virtual/input/input6
[   74.898523][ T6103] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   74.900928][ T6103] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   74.928553][   T10] cdc_eem 3-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.2-1, CDC EEM Device, 4a:18:4d:30:67:0b
[   74.992497][ T6125] loop1: detected capacity change from 0 to 16
[   75.004901][ T6125] erofs (device loop1): mounted with root inode @ nid 36.
[   75.016380][ T6125] VFS: Lookup of '$' in erofs loop1 would have caused loop
[   75.191833][ T5910] usb 3-1: USB disconnect, device number 4
[   75.195928][ T5910] cdc_eem 3-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.2-1, CDC EEM Device
[   76.011163][ T6149] loop2: detected capacity change from 0 to 32768
[   76.022727][ T6149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.86 (6149)
[   76.445472][ T5856] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[   76.568275][ T5856] asix 1-1:0.0: probe with driver asix failed with error -71
[   76.576085][ T5856] usb 1-1: USB disconnect, device number 5
[   76.592253][ T6149] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   76.596081][ T6149] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   76.637132][ T6158] loop1: detected capacity change from 0 to 512
[   76.649959][ T6158] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   76.671677][ T6158] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[   76.677353][ T6158] System zones: 0-2, 18-18, 34-34
[   76.683240][ T6158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.685269][ T6149] BTRFS info (device loop2): enabling ssd optimizations
[   76.687197][ T6158] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.690106][ T6149] BTRFS info (device loop2): enabling free space tree
[   76.741854][ T6158] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[   76.746623][ T6158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.751541][ T5855] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   76.756218][ T6158] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring
[   76.761643][ T6158] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   76.784288][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.050832][ T6184] loop0: detected capacity change from 0 to 1024
[   77.063145][ T6184] hfsplus: failed to load root directory
[   77.551113][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.626775][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.710115][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.768451][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.783994][ T6212] netlink: 'syz.2.108': attribute type 10 has an invalid length.
[   77.788553][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.792473][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.804365][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.807574][ T6212] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.811335][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.814573][ T6212] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.821984][ T6212] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   77.912268][   T13] bridge_slave_1: left allmulticast mode
[   77.914687][   T13] bridge_slave_1: left promiscuous mode
[   77.929168][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.942144][   T13] bridge_slave_0: left allmulticast mode
[   77.944014][   T13] bridge_slave_0: left promiscuous mode
[   77.946749][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.980401][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.985343][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.989599][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.000869][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.005146][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.087009][ T6230] loop0: detected capacity change from 0 to 1024
[   78.098867][ T6230] hfsplus: invalid catalog max_key_len 0
[   78.100899][ T6230] hfsplus: failed to load catalog file
[   78.318310][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.323867][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.329125][   T13] bond0 (unregistering): Released all slaves
[   78.395290][ T6236] loop0: detected capacity change from 0 to 32768
[   78.431796][ T6236] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   78.467401][ T6236] syz.0.115 (6236) used greatest stack depth: 19272 bytes left
[   78.486447][ T5846] ocfs2: Unmounting device (7,0) on (node local)
[   78.744281][ T6256] raw_sendmsg: syz.2.120 forgot to set AF_INET. Fix it!
[   78.764392][   T13] hsr_slave_0: left promiscuous mode
[   78.770005][   T13] hsr_slave_1: left promiscuous mode
[   78.778555][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.781633][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.788467][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.791045][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.802224][   T13] veth1_macvtap: left promiscuous mode
[   78.804172][   T13] veth0_macvtap: left promiscuous mode
[   78.806046][   T13] veth1_vlan: left promiscuous mode
[   78.808616][   T13] veth0_vlan: left promiscuous mode
[   78.840481][ T6262] mmap: syz.2.123 (6262) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   78.990651][ T5314] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   79.148851][ T5314] usb 1-1: Using ep0 maxpacket: 16
[   79.154453][ T5314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.179277][ T5314] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40
[   79.184634][ T5314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.189548][ T5314] usb 1-1: Product: syz
[   79.197726][ T5314] usb 1-1: Manufacturer: syz
[   79.199717][ T5314] usb 1-1: SerialNumber: syz
[   79.212606][ T5314] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7
[   79.295163][   T13] team0 (unregistering): Port device team_slave_1 removed
[   79.351665][   T13] team0 (unregistering): Port device team_slave_0 removed
[   79.421972][ T5910] usb 1-1: USB disconnect, device number 6
[   79.726413][ T6219] chnl_net:caif_netlink_parms(): no params data found
[   79.844876][ T6297] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.957530][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.960365][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.963205][ T6219] bridge_slave_0: entered allmulticast mode
[   79.968320][ T6219] bridge_slave_0: entered promiscuous mode
[   79.973110][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.976489][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.980601][ T6219] bridge_slave_1: entered allmulticast mode
[   79.984141][ T6219] bridge_slave_1: entered promiscuous mode
[   80.019592][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.035153][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.088036][ T5860] Bluetooth: hci1: command tx timeout
[   80.090393][ T6219] team0: Port device team_slave_0 added
[   80.098010][ T6219] team0: Port device team_slave_1 added
[   80.109410][ T6310] loop2: detected capacity change from 0 to 256
[   80.120513][ T6308] loop0: detected capacity change from 0 to 4096
[   80.133345][ T6310] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   80.149837][ T6310] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   80.189734][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.193075][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.194162][ T6310] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   80.208056][ T6219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.225394][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.232652][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.243254][ T6310] exFAT-fs (loop2): failed to load alloc-bitmap
[   80.245658][ T6310] exFAT-fs (loop2): failed to recognize exfat type
[   80.259170][ T6219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.269889][ T6315] loop0: detected capacity change from 0 to 128
[   80.296888][ T6315] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   80.353238][ T6219] hsr_slave_0: entered promiscuous mode
[   80.355689][ T6219] hsr_slave_1: entered promiscuous mode
[   80.361249][ T6219] debugfs: 'hsr0' already exists in 'hsr'
[   80.363273][ T6219] Cannot create hsr debugfs directory
[   80.416351][ T1092] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   80.633766][ T6219] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.651386][ T6219] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.662951][ T6219] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.670344][ T6219] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.726516][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.729687][ T6219] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.732883][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.735882][ T6219] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.745506][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.747398][ T5856] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   80.751377][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.859864][ T6219] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.894284][ T6219] 8021q: adding VLAN 0 to HW filter on device team0
[   80.914575][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.917625][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.941515][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.944649][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.185765][ T6219] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.241919][ T6219] veth0_vlan: entered promiscuous mode
[   81.251812][ T6219] veth1_vlan: entered promiscuous mode
[   81.273578][ T6219] veth0_macvtap: entered promiscuous mode
[   81.278147][ T6219] veth1_macvtap: entered promiscuous mode
[   81.290958][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.306617][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.328069][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.334614][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.344714][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.351706][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.423963][ T3041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.427985][ T3041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.479975][ T3652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.482733][ T3652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.597518][ T5856] usb 1-1: Using ep0 maxpacket: 16
[   81.601298][ T5856] usb 1-1: config 4 has an invalid interface number: 9 but max is 0
[   81.604611][ T5856] usb 1-1: config 4 has no interface number 0
[   81.609069][ T5856] usb 1-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   81.612303][ T5856] usb 1-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 167
[   81.616058][ T5856] usb 1-1: config 4 interface 9 has no altsetting 0
[   81.621178][ T6352] loop3: detected capacity change from 0 to 1024
[   81.621360][ T5856] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[   81.628003][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.631491][ T5856] usb 1-1: Product: syz
[   81.633209][ T5856] usb 1-1: Manufacturer: syz
[   81.635500][ T5856] usb 1-1: SerialNumber: syz
[   81.666139][ T6327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   81.667394][ T6352] hfsplus: request for non-existent node 3 in B*Tree
[   81.678786][ T6352] hfsplus: request for non-existent node 3 in B*Tree
[   81.682157][ T6327] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   81.708638][ T5856] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   81.910453][  T793] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   81.945737][ T5856] usb 1-1: USB disconnect, device number 7
[   81.948048][ T5883] usb 1-1: Failed to submit usb control message: -71
[   81.950625][ T5883] usb 1-1: unable to send the bmi data to the device: -71
[   81.953325][ T5883] usb 1-1: unable to get target info from device
[   81.958787][ T5883] usb 1-1: could not get target info (-71)
[   81.961033][ T5883] usb 1-1: could not probe fw (-71)
[   82.057522][  T793] usb 3-1: Using ep0 maxpacket: 32
[   82.068872][  T793] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   82.072515][  T793] usb 3-1: config 0 has no interface number 0
[   82.075096][  T793] usb 3-1: config 0 interface 184 has no altsetting 0
[   82.085038][  T793] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   82.089128][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.092607][  T793] usb 3-1: Product: syz
[   82.094074][  T793] usb 3-1: Manufacturer: syz
[   82.095857][  T793] usb 3-1: SerialNumber: syz
[   82.100659][  T793] usb 3-1: config 0 descriptor??
[   82.111657][  T793] smsc75xx v1.0.0
[   82.167478][ T5860] Bluetooth: hci1: command tx timeout
[   82.742010][  T793] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   82.747179][  T793] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   82.796117][ T6368] netlink: 'syz.0.154': attribute type 2 has an invalid length.
[   83.436595][ T6371] loop3: detected capacity change from 0 to 4096
[   83.468013][ T6371] ntfs3(loop3): It is recommened to use chkdsk.
[   83.472967][ T6371] ntfs3(loop3): Failed to load $LogFile (-22).
[   83.621352][  T793] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   83.625964][  T793] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   83.633579][  T793] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   83.637956][  T793] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[   83.641769][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'.
[   83.645223][  T793] usb 3-1: USB disconnect, device number 5
[   84.007495][ T5856] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   84.177519][ T5856] usb 4-1: Using ep0 maxpacket: 32
[   84.181608][ T5856] usb 4-1: config 0 has an invalid interface number: 161 but max is 0
[   84.184712][ T5856] usb 4-1: config 0 has no interface number 0
[   84.193171][ T5856] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=44.e9
[   84.196957][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.214543][ T5856] usb 4-1: Product: syz
[   84.216355][ T5856] usb 4-1: Manufacturer: syz
[   84.218967][ T5856] usb 4-1: SerialNumber: syz
[   84.229083][ T5856] usb 4-1: config 0 descriptor??
[   84.247944][ T5860] Bluetooth: hci1: command tx timeout
[   84.254852][ T6386] loop2: detected capacity change from 0 to 128
[   84.345552][ T6392] loop0: detected capacity change from 0 to 1024
[   84.443383][  T793] usb 4-1: USB disconnect, device number 2
[   84.454155][ T6402] loop0: detected capacity change from 0 to 128
[   84.845480][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.904094][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.910218][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.411324][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.181'.
[   85.594285][ T6443] loop3: detected capacity change from 0 to 512
[   85.608259][ T6443] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.188: ea_inode file size=4 entry size=6
[   85.615840][ T6443] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   85.625695][ T6443] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.188: corrupted inode contents
[   85.634504][ T6443] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #15: comm syz.3.188: mark_inode_dirty error
[   85.639744][ T6443] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.188: corrupted inode contents
[   85.644908][ T6443] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.188: mark_inode_dirty error
[   85.648955][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   85.653541][ T6443] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.188: mark inode dirty (error -117)
[   85.662388][ T6443] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[   85.666541][ T6443] EXT4-fs (loop3): 1 orphan inode deleted
[   85.676794][ T6443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.828576][    T9] usb 3-1: config 0 has an invalid interface number: 113 but max is 0
[   85.836368][    T9] usb 3-1: config 0 has no interface number 0
[   85.844812][    T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a
[   85.851162][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.857909][    T9] usb 3-1: Product: syz
[   85.861942][    T9] usb 3-1: Manufacturer: syz
[   85.866127][    T9] usb 3-1: SerialNumber: syz
[   85.872572][ T6219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.877162][    T9] usb 3-1: config 0 descriptor??
[   85.923952][ T6449] warning: `syz.3.190' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.005148][ T6453] loop3: detected capacity change from 0 to 128
[   86.083913][ T6453] syz.3.192: attempt to access beyond end of device
[   86.083913][ T6453] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[   86.095028][    T9] snd_usb_variax 3-1:0.113: Line 6 Variax Workbench found
[   86.096795][ T6453] syz.3.192: attempt to access beyond end of device
[   86.096795][ T6453] loop3: rw=2049, sector=185, nr_sectors = 16 limit=128
[   86.097705][    T9] usb 3-1: selecting invalid altsetting 1
[   86.097715][    T9] snd_usb_variax 3-1:0.113: set_interface failed
[   86.097991][    T9] snd_usb_variax 3-1:0.113: Line 6 Variax Workbench now disconnected
[   86.108490][ T6453] syz.3.192: attempt to access beyond end of device
[   86.108490][ T6453] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128
[   86.110968][    T9] snd_usb_variax 3-1:0.113: probe with driver snd_usb_variax failed with error -22
[   86.115224][ T6453] syz.3.192: attempt to access beyond end of device
[   86.115224][ T6453] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128
[   86.122790][    T9] usb 3-1: USB disconnect, device number 6
[   86.123781][ T6453] syz.3.192: attempt to access beyond end of device
[   86.123781][ T6453] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128
[   86.129582][ T6453] syz.3.192: attempt to access beyond end of device
[   86.129582][ T6453] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128
[   86.134293][ T6453] syz.3.192: attempt to access beyond end of device
[   86.134293][ T6453] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128
[   86.139184][ T6453] syz.3.192: attempt to access beyond end of device
[   86.139184][ T6453] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128
[   86.143725][ T6453] syz.3.192: attempt to access beyond end of device
[   86.143725][ T6453] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128
[   86.148909][ T6453] syz.3.192: attempt to access beyond end of device
[   86.148909][ T6453] loop3: rw=2049, sector=321, nr_sectors = 8 limit=128
[   86.327760][ T5860] Bluetooth: hci1: command tx timeout
[   86.428638][   T24] cfg80211: failed to load regulatory.db
[   86.559252][ T6465] loop0: detected capacity change from 0 to 64
[   86.867509][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   86.957322][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   87.019364][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.024127][    T9] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[   87.028083][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.034343][    T9] usb 1-1: config 0 descriptor??
[   87.072312][ T6477] loop3: detected capacity change from 0 to 1024
[   87.092257][ T6477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   87.098257][ T6477] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.117344][   T24] usb 3-1: Using ep0 maxpacket: 16
[   87.123461][   T24] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[   87.133153][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.136519][   T24] usb 3-1: Product: syz
[   87.139786][   T24] usb 3-1: Manufacturer: syz
[   87.141410][ T3041] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm kworker/u10:4: lblock 0 mapped to illegal pblock 0 (length 1)
[   87.151048][   T24] usb 3-1: SerialNumber: syz
[   87.156058][   T24] usb 3-1: config 0 descriptor??
[   87.160512][ T3041] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   87.169747][   T24] ums-onetouch 3-1:0.0: USB Mass Storage device detected
[   87.173238][ T3041] EXT4-fs (loop3): This should not happen!! Data will be lost
[   87.173238][ T3041] 
[   87.184085][ T6219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   87.370478][  T793] usb 3-1: USB disconnect, device number 7
[   87.466079][    T9] steelseries 0003:1038:12B6.0002: reserved main item tag 0xd
[   87.469631][    T9] steelseries 0003:1038:12B6.0002: item fetching failed at offset 6/7
[   87.473611][    T9] steelseries 0003:1038:12B6.0002: probe with driver steelseries failed with error -22
[   87.647635][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   87.665536][ T5910] usb 1-1: USB disconnect, device number 8
[   87.807646][   T24] usb 4-1: Using ep0 maxpacket: 8
[   87.811478][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   87.815959][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   87.820334][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   87.824356][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   87.830121][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   87.833776][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.045843][   T24] usb 4-1: GET_CAPABILITIES returned 0
[   88.053220][   T24] usbtmc 4-1:16.0: can't read capabilities
[   88.272542][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   88.279759][ T5856] usb 4-1: USB disconnect, device number 3
[   89.192229][ T6513] loop3: detected capacity change from 0 to 1024
[   89.200409][ T6513] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   89.248335][ T6513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.263030][ T6513] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.214: missing EA_INODE flag
[   89.280701][ T6513] EXT4-fs (loop3): Remounting filesystem read-only
[   89.293812][ T6525] loop2: detected capacity change from 0 to 512
[   89.302119][ T6525] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   89.312719][ T6527] loop0: detected capacity change from 0 to 512
[   89.316062][ T6525] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   89.331218][ T6525] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.218: corrupted xattr entries
[   89.341924][ T6525] EXT4-fs (loop2): Remounting filesystem read-only
[   89.347199][ T6525] EXT4-fs (loop2): 1 truncate cleaned up
[   89.353473][ T6525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.360495][ T6527] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.219: casefold flag without casefold feature
[   89.366925][ T6527] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.219: couldn't read orphan inode 15 (err -117)
[   89.375222][ T6527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.391679][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.426067][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.447147][ T6531] process 'syz.2.220' launched '/dev/fd/3' with NULL argv: empty string added
[   89.778865][ T6219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.092744][ T6564] loop3: detected capacity change from 0 to 40427
[   90.099251][ T6564] F2FS-fs (loop3): Image doesn't support compression
[   90.102269][ T6564] F2FS-fs (loop3): build fault injection rate: 690
[   90.105193][ T6564] F2FS-fs (loop3): build fault injection type: 0x4
[   90.112371][ T6564] F2FS-fs (loop3): invalid crc value
[   90.178386][ T6564] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   90.184210][ T6564] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   90.221855][ T6219] CPU: 1 UID: 0 PID: 6219 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   90.221869][ T6219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.221873][ T6219] Call Trace:
[   90.221877][ T6219]  <TASK>
[   90.221881][ T6219]  dump_stack_lvl+0x189/0x250
[   90.221894][ T6219]  ? __pfx_dump_stack_lvl+0x10/0x10
[   90.221903][ T6219]  ? __pfx_queue_work_on+0x10/0x10
[   90.221909][ T6219]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   90.221918][ T6219]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   90.221931][ T6219]  f2fs_handle_critical_error+0x37c/0x540
[   90.221941][ T6219]  f2fs_write_end_io+0x886/0xb60
[   90.221958][ T6219]  __submit_merged_bio+0x27a/0x6a0
[   90.221968][ T6219]  __submit_merged_write_cond+0x255/0x530
[   90.221982][ T6219]  f2fs_write_data_pages+0x261d/0x3000
[   90.222003][ T6219]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   90.222029][ T6219]  ? check_path+0x21/0x40
[   90.222037][ T6219]  ? check_noncircular+0xe0/0x160
[   90.222062][ T6219]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   90.222071][ T6219]  do_writepages+0x32e/0x550
[   90.222083][ T6219]  ? do_raw_spin_unlock+0x4d/0x240
[   90.222093][ T6219]  filemap_fdatawrite+0x199/0x240
[   90.222100][ T6219]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   90.222125][ T6219]  ? do_raw_spin_unlock+0x4d/0x240
[   90.222135][ T6219]  f2fs_sync_dirty_inodes+0x31f/0x830
[   90.222150][ T6219]  f2fs_write_checkpoint+0x93e/0x2440
[   90.222158][ T6219]  ? stack_depot_save_flags+0x40/0x860
[   90.222179][ T6219]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   90.222202][ T6219]  ? f2fs_stop_gc_thread+0x7f/0xb0
[   90.222212][ T6219]  ? kfree+0x19a/0x6d0
[   90.222223][ T6219]  kill_f2fs_super+0x2cc/0x6d0
[   90.222234][ T6219]  ? __pfx_kill_f2fs_super+0x10/0x10
[   90.222250][ T6219]  ? shrinker_free+0x2ce/0x3e0
[   90.222262][ T6219]  deactivate_locked_super+0xbc/0x130
[   90.222274][ T6219]  cleanup_mnt+0x425/0x4c0
[   90.222285][ T6219]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.222295][ T6219]  task_work_run+0x1d4/0x260
[   90.222305][ T6219]  ? __pfx_task_work_run+0x10/0x10
[   90.222313][ T6219]  ? __x64_sys_umount+0x122/0x160
[   90.222351][ T6219]  ? exit_to_user_mode_loop+0x40/0x130
[   90.222364][ T6219]  exit_to_user_mode_loop+0xe9/0x130
[   90.222374][ T6219]  do_syscall_64+0x2bd/0xfa0
[   90.222383][ T6219]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.222391][ T6219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.222398][ T6219]  ? exc_page_fault+0xab/0x100
[   90.222407][ T6219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.222414][ T6219] RIP: 0033:0x7f5384f8ff57
[   90.222421][ T6219] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   90.222427][ T6219] RSP: 002b:00007fffc1a34e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   90.222436][ T6219] RAX: 0000000000000000 RBX: 00007f5385011c2d RCX: 00007f5384f8ff57
[   90.222441][ T6219] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc1a34f20
[   90.222445][ T6219] RBP: 00007fffc1a34f20 R08: 0000000000000000 R09: 0000000000000000
[   90.222449][ T6219] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc1a35fb0
[   90.222454][ T6219] R13: 00007f5385011c2d R14: 0000000000015fea R15: 00007fffc1a35ff0
[   90.222472][ T6219]  </TASK>
[   90.222477][ T6219] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   90.888801][ T6575] loop0: detected capacity change from 0 to 2048
[   90.930032][ T6578] netlink: 'syz.3.240': attribute type 21 has an invalid length.
[   90.935835][ T6578] netlink: 156 bytes leftover after parsing attributes in process `syz.3.240'.
[   90.942809][ T6578] netlink: 'syz.3.240': attribute type 21 has an invalid length.
[   90.944890][ T6575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.946211][ T6578] netlink: 156 bytes leftover after parsing attributes in process `syz.3.240'.
[   90.962360][ T6575] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   90.993138][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.113431][ T6588] loop0: detected capacity change from 0 to 8
[   91.122891][ T6588] SQUASHFS error: zlib decompression failed, data probably corrupt
[   91.125618][ T6588] SQUASHFS error: Failed to read block 0x9b: -5
[   91.129175][ T6588] SQUASHFS error: Unable to read metadata cache entry [99]
[   91.131881][ T6588] SQUASHFS error: Unable to read inode 0x127
[   91.220392][ T6593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'.
[   91.463678][   T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   91.533078][ T6607] loop3: detected capacity change from 0 to 512
[   91.536182][ T6607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   91.552632][ T6607] EXT4-fs (loop3): 1 truncate cleaned up
[   91.555938][ T6607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.663508][ T6610] loop2: detected capacity change from 0 to 1024
[   91.720391][ T6610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.727585][   T24] usb 1-1: Using ep0 maxpacket: 32
[   91.733878][   T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[   91.737703][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.740936][   T24] usb 1-1: Product: syz
[   91.742577][   T24] usb 1-1: Manufacturer: syz
[   91.744437][   T24] usb 1-1: SerialNumber: syz
[   91.751589][   T24] usb 1-1: config 0 descriptor??
[   92.125036][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.309190][   T24] airspy 1-1:0.0: Board ID: 00
[   92.311095][   T24] airspy 1-1:0.0: Firmware version: 
[   92.445786][ T6633] __vm_enough_memory: pid: 6633, comm: syz.2.260, bytes: 21200530722816 not enough memory for the allocation
[   92.455719][ T6219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.524821][ T6635] loop2: detected capacity change from 0 to 1764
[   92.528097][ T6635] iso9660: Bad value for 'mode'
[   93.077625][ T6635] loop2: detected capacity change from 0 to 32768
[   93.088582][ T6635] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.262 (6635)
[   93.098006][ T6635] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   93.102098][ T6635] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   93.107002][ T6635] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048
[   93.124134][ T6635] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[   93.159490][ T6635] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048
[   93.176875][ T6635] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[   93.195028][ T6635] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[   93.215372][ T6635] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[   93.237732][ T6635] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048
[   93.302298][ T6635] BTRFS info (device loop2): enabling ssd optimizations
[   93.305156][ T6635] BTRFS info (device loop2): using spread ssd allocation scheme
[   93.314326][ T6635] BTRFS info (device loop2): turning off barriers
[   93.317081][ T6635] BTRFS info (device loop2): enabling free space tree
[   93.319987][ T6635] BTRFS info (device loop2): enabling auto defrag
[   93.322686][ T6635] BTRFS info (device loop2): force zlib compression, level 3
[   93.328121][   T24] airspy 1-1:0.0: usb_control_msg() failed -71 request 12
[   93.350574][   T24] airspy 1-1:0.0: Registered as swradio24
[   93.358673][   T24] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[   93.394694][   T24] usb 1-1: USB disconnect, device number 9
[   94.056334][ T6668] loop3: detected capacity change from 0 to 40427
[   94.081850][ T6668] F2FS-fs (loop3): Image doesn't support compression
[   94.098981][ T6668] F2FS-fs (loop3): build fault injection rate: 690
[   94.101199][ T6668] F2FS-fs (loop3): build fault injection type: 0x2
[   94.138571][ T6668] F2FS-fs (loop3): invalid crc value
[   94.344759][ T6668] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   94.371468][ T6668] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   94.376429][ T6691] loop0: detected capacity change from 0 to 2048
[   94.557412][ T6219] bio_check_eod: 99 callbacks suppressed
[   94.557423][ T6219] syz-executor: attempt to access beyond end of device
[   94.557423][ T6219] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   94.570543][ T6219] CPU: 1 UID: 0 PID: 6219 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   94.570555][ T6219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.570559][ T6219] Call Trace:
[   94.570563][ T6219]  <TASK>
[   94.570566][ T6219]  dump_stack_lvl+0x189/0x250
[   94.570581][ T6219]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.570590][ T6219]  ? __pfx_queue_work_on+0x10/0x10
[   94.570596][ T6219]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   94.570606][ T6219]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   94.570619][ T6219]  f2fs_handle_critical_error+0x37c/0x540
[   94.570631][ T6219]  f2fs_write_end_io+0x886/0xb60
[   94.570649][ T6219]  __submit_merged_bio+0x27a/0x6a0
[   94.570659][ T6219]  __submit_merged_write_cond+0x255/0x530
[   94.570675][ T6219]  f2fs_write_data_pages+0x261d/0x3000
[   94.570699][ T6219]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   94.570741][ T6219]  ? __lock_acquire+0xab9/0xd20
[   94.570761][ T6219]  ? do_raw_spin_lock+0x121/0x290
[   94.570775][ T6219]  ? do_raw_spin_unlock+0x4d/0x240
[   94.570784][ T6219]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   94.570793][ T6219]  do_writepages+0x32e/0x550
[   94.570806][ T6219]  ? do_raw_spin_unlock+0x4d/0x240
[   94.570816][ T6219]  filemap_fdatawrite+0x199/0x240
[   94.570824][ T6219]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   94.570853][ T6219]  ? do_raw_spin_unlock+0x4d/0x240
[   94.570863][ T6219]  f2fs_sync_dirty_inodes+0x31f/0x830
[   94.570880][ T6219]  f2fs_write_checkpoint+0x93e/0x2440
[   94.570889][ T6219]  ? __lock_acquire+0xab9/0xd20
[   94.570912][ T6219]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   94.570948][ T6219]  kill_f2fs_super+0x2cc/0x6d0
[   94.570961][ T6219]  ? __pfx_kill_f2fs_super+0x10/0x10
[   94.570979][ T6219]  ? shrinker_free+0x2ce/0x3e0
[   94.570991][ T6219]  deactivate_locked_super+0xbc/0x130
[   94.571004][ T6219]  cleanup_mnt+0x425/0x4c0
[   94.571017][ T6219]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.571028][ T6219]  task_work_run+0x1d4/0x260
[   94.571038][ T6219]  ? __pfx_task_work_run+0x10/0x10
[   94.571046][ T6219]  ? __x64_sys_umount+0x122/0x160
[   94.571056][ T6219]  ? exit_to_user_mode_loop+0x40/0x130
[   94.571069][ T6219]  exit_to_user_mode_loop+0xe9/0x130
[   94.571079][ T6219]  do_syscall_64+0x2bd/0xfa0
[   94.571089][ T6219]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.571097][ T6219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.571104][ T6219]  ? exc_page_fault+0xab/0x100
[   94.571114][ T6219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.571121][ T6219] RIP: 0033:0x7f5384f8ff57
[   94.571129][ T6219] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   94.571134][ T6219] RSP: 002b:00007fffc1a34e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   94.571143][ T6219] RAX: 0000000000000000 RBX: 00007f5385011c2d RCX: 00007f5384f8ff57
[   94.571148][ T6219] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc1a34f20
[   94.571152][ T6219] RBP: 00007fffc1a34f20 R08: 0000000000000000 R09: 0000000000000000
[   94.571156][ T6219] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc1a35fb0
[   94.571161][ T6219] R13: 00007f5385011c2d R14: 000000000001709f R15: 00007fffc1a35ff0
[   94.571174][ T6219]  </TASK>
[   94.736352][ T6219] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   94.760148][ T5855] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   95.015323][ T6708] gretap0: entered promiscuous mode
[   95.020380][ T6708] gretap0: left promiscuous mode
[   95.083375][ T6710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'.
[   95.167545][ T5856] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   95.327590][ T5856] usb 3-1: Using ep0 maxpacket: 32
[   95.348850][ T5856] usb 3-1: unable to get BOS descriptor or descriptor too short
[   95.358963][ T5856] usb 3-1: config 1 has an invalid descriptor of length 38, skipping remainder of the config
[   95.362639][ T5856] usb 3-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   95.363562][ T6728] loop0: detected capacity change from 0 to 256
[   95.368270][ T5856] usb 3-1: config 1 interface 0 has no altsetting 0
[   95.372728][ T5856] usb 3-1: string descriptor 0 read error: -22
[   95.381885][ T5856] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   95.386827][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.389698][ T6728] FAT-fs (loop0): Directory bread(block 64) failed
[   95.389731][ T6728] FAT-fs (loop0): Directory bread(block 65) failed
[   95.389788][ T6728] FAT-fs (loop0): Directory bread(block 66) failed
[   95.389803][ T6728] FAT-fs (loop0): Directory bread(block 67) failed
[   95.389855][ T6728] FAT-fs (loop0): Directory bread(block 68) failed
[   95.389871][ T6728] FAT-fs (loop0): Directory bread(block 69) failed
[   95.389924][ T6728] FAT-fs (loop0): Directory bread(block 70) failed
[   95.389938][ T6728] FAT-fs (loop0): Directory bread(block 71) failed
[   95.395851][ T5856] cdc_ether 3-1:1.0: skipping garbage
[   95.398154][ T6728] FAT-fs (loop0): Directory bread(block 72) failed
[   95.407782][ T5856] cdc_ether 3-1:1.0: skipping garbage
[   95.407794][ T5856] usb 3-1: bad CDC descriptors
[   95.420397][ T6728] FAT-fs (loop0): Directory bread(block 73) failed
[   95.598153][ T5856] usb 3-1: USB disconnect, device number 8
[   95.677400][ T5885] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   95.847663][ T5885] usb 4-1: Using ep0 maxpacket: 8
[   95.862855][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.871798][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[   95.876325][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[   95.883048][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[   95.886738][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   95.898679][ T5885] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[   95.901914][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[   95.904744][ T5885] usb 4-1: Product: syz
[   95.906332][ T5885] usb 4-1: Manufacturer: syz
[   95.911036][ T5885] usb 4-1: SerialNumber: syz
[   95.948756][ T5885] usb 4-1: config 0 descriptor??
[   96.179778][ T5885] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71
[   96.182589][ T5885] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[   96.191851][ T5885] usb 4-1: USB disconnect, device number 4
[   96.509466][ T6751] loop2: detected capacity change from 0 to 1024
[   96.512886][ T6751] EXT4-fs: Ignoring removed bh option
[   96.687654][ T6751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   96.767032][ T6751] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.294: bad entry in directory: inode out of bounds - offset=0, inode=1073741837, rec_len=16, size=56 fake=0
[   96.801281][ T6751] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.294: corrupted in-inode xattr: e_value out of bounds
[   96.848405][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   96.921287][ T6761] loop3: detected capacity change from 0 to 256
[   97.238139][ T5885] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   97.317348][ T5856] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   97.334759][ T6772] loop0: detected capacity change from 0 to 1024
[   97.339468][ T6772] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   97.346340][ T6772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.371086][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.387775][ T5885] usb 4-1: Using ep0 maxpacket: 32
[   97.394378][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   97.407508][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[   97.412159][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[   97.416705][ T5885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[   97.437944][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   97.451846][ T5885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[   97.455806][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   97.459173][ T6777] loop0: detected capacity change from 0 to 128
[   97.462609][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   97.476699][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.481392][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.485940][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   97.492722][ T6777] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   97.496269][ T5885] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf
[   97.498066][ T5856] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   97.505775][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.510322][ T6777] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.513858][ T5885] usb 4-1: Product: syz
[   97.514996][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.516274][ T5885] usb 4-1: Manufacturer: syz
[   97.516288][ T5885] usb 4-1: SerialNumber: syz
[   97.526403][ T5885] usb 4-1: config 0 descriptor??
[   97.530935][ T6763] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   97.538454][ T5856] usb 3-1: config 0 descriptor??
[   97.538548][ T5885] usb 4-1: NFC: Reader power on cmd error -90
[   97.543822][ T5885] pn533_usb 4-1:0.0: NFC: Couldn't poweron the reader (error -90)
[   97.549448][ T5885] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90
[   97.566858][ T5846] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.747726][    T9] usb 4-1: USB disconnect, device number 5
[   98.019927][ T5856] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   98.280477][ T5856] usb 3-1: USB disconnect, device number 9
[   98.850220][ T5856] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   98.879562][ T6797] netlink: 36 bytes leftover after parsing attributes in process `syz.2.312'.
[   99.009373][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.013268][ T5856] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   99.016869][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.021956][ T5856] usb 1-1: config 0 descriptor??
[   99.327777][    T9] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[   99.435579][ T5856] lenovo 0003:17EF:6047.0005: collection stack underflow
[   99.441136][ T5856] lenovo 0003:17EF:6047.0005: item 0 2 0 12 parsing failed
[   99.444041][ T5856] lenovo 0003:17EF:6047.0005: hid_parse failed
[   99.446396][ T5856] lenovo 0003:17EF:6047.0005: probe with driver lenovo failed with error -22
[   99.645892][ T5856] usb 1-1: USB disconnect, device number 10
[   99.937332][ T5885] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  100.087953][ T5885] usb 3-1: Using ep0 maxpacket: 8
[  100.091945][ T5885] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  100.095393][ T5885] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  100.099587][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  100.103573][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  100.107852][ T5885] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  100.113028][ T5885] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  100.116685][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.218399][   T33] audit: type=1326 audit(1759353308.012:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.0.321" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  100.238323][   T33] audit: type=1326 audit(1759353308.022:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.0.321" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  100.256453][   T33] audit: type=1326 audit(1759353308.032:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.0.321" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  100.275476][   T33] audit: type=1326 audit(1759353308.032:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.0.321" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  100.284299][   T33] audit: type=1326 audit(1759353308.032:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.0.321" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  100.302968][   T33] audit: type=1326 audit(1759353308.052:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.0.321" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  100.322103][   T33] audit: type=1326 audit(1759353308.052:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.0.321" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  100.343778][   T33] audit: type=1326 audit(1759353308.052:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.0.321" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe70f9c14e5 code=0x7ffc0000
[  100.362978][   T33] audit: type=1326 audit(1759353308.052:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.0.321" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  100.372934][   T33] audit: type=1326 audit(1759353308.052:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.0.321" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  100.421638][ T6826] loop0: detected capacity change from 0 to 1024
[  100.472552][ T6826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.541888][ T5856] usb 3-1: USB disconnect, device number 10
[  101.417511][ T5856] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  101.569792][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.573982][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.582756][ T5856] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  101.587024][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.597806][ T5856] usb 4-1: config 0 descriptor??
[  101.792190][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.120752][ T5856] arvo 0003:1E7D:30D4.0006: item fetching failed at offset 5/7
[  102.126627][ T5856] arvo 0003:1E7D:30D4.0006: parse failed
[  102.129643][ T5856] arvo 0003:1E7D:30D4.0006: probe with driver arvo failed with error -22
[  102.279633][ T6861] loop0: detected capacity change from 0 to 256
[  102.282221][ T6861] exfat: Deprecated parameter 'utf8'
[  102.283987][ T6861] exfat: Deprecated parameter 'utf8'
[  102.291215][ T6861] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  102.328645][ T5314] usb 4-1: USB disconnect, device number 6
[  102.400566][ T6867] loop0: detected capacity change from 0 to 8
[  102.421271][ T6867] SQUASHFS error: xz decompression failed, data probably corrupt
[  102.423739][ T6867] SQUASHFS error: Failed to read block 0x108: -5
[  102.425834][ T6867] SQUASHFS error: Unable to read metadata cache entry [106]
[  102.429148][ T6867] SQUASHFS error: Unable to read inode 0x11f
[  103.151548][ T6885] netlink: 'syz.3.346': attribute type 3 has an invalid length.
[  103.156405][ T6885] netlink: 'syz.3.346': attribute type 1 has an invalid length.
[  103.159818][ T6885] netlink: 216 bytes leftover after parsing attributes in process `syz.3.346'.
[  103.163562][ T6885] NCSI netlink: No device for ifindex 33022
[  103.846954][ T6897] loop2: detected capacity change from 0 to 7
[  103.851841][ T6897]  loop2: [POWERTEC] p1
[  103.853847][ T6897] loop2: p1 size 4294901760 extends beyond EOD, truncated
[  103.890659][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  103.986600][ T6895] loop0: detected capacity change from 0 to 32768
[  104.030967][ T6895] read_mapping_page failed!
[  104.033142][ T6895] ERROR: (device loop0): txCommit: 
[  104.033142][ T6895] 
[  104.065579][ T6895] ERROR: (device loop0): remounting filesystem as read-only
[  104.068243][ T6895] ERROR: (device loop0): diFree: numfree > numinos
[  104.068243][ T6895] 
[  104.440444][ T5885] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  104.857866][ T5856] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  105.017521][ T5856] usb 3-1: Using ep0 maxpacket: 8
[  105.023775][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  105.028368][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  105.032969][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[  105.037659][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[  105.041849][ T5856] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  105.052962][ T5856] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  105.056273][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.059997][ T5856] usb 3-1: Product: syz
[  105.061423][ T5856] usb 3-1: Manufacturer: syz
[  105.062945][ T5856] usb 3-1: SerialNumber: syz
[  105.071772][ T5856] usb 3-1: config 0 descriptor??
[  105.081653][ T5856] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[  105.170285][ T6921] loop3: detected capacity change from 0 to 128
[  105.293256][ T5856] usb 3-1: USB disconnect, device number 11
[  105.302428][ T5885] usb 1-1: config 7 descriptor has 1 excess byte, ignoring
[  105.305382][ T5885] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2
[  105.313817][ T5885] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  105.317837][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.321059][ T5885] usb 1-1: Product: syz
[  105.322822][ T5885] usb 1-1: Manufacturer: syz
[  105.324679][ T5885] usb 1-1: SerialNumber: syz
[  105.331403][ T5885] rndis_host 1-1:7.0: skipping garbage
[  105.333683][ T5885] usb 1-1: bad CDC descriptors
[  105.336508][ T5885] option 1-1:7.0: GSM modem (1-port) converter detected
[  105.578319][  T793] usb 1-1: USB disconnect, device number 11
[  105.581194][  T793] option 1-1:7.0: device disconnected
[  105.857385][ T6925] netlink: 'syz.2.361': attribute type 10 has an invalid length.
[  105.868591][ T6925] team0: Port device dummy0 added
[  105.872044][ T6925] netlink: 'syz.2.361': attribute type 10 has an invalid length.
[  105.880537][ T6925] team0: Port device dummy0 removed
[  105.886822][ T6925] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  105.982310][ T6931] loop2: detected capacity change from 0 to 4096
[  105.997033][ T6932] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.317381][ T6951] mkiss: ax0: crc mode is auto.
[  106.330314][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'.
[  106.334182][ T6945] netlink: 'syz.3.369': attribute type 15 has an invalid length.
[  106.341170][ T6945] netlink: 'syz.3.369': attribute type 18 has an invalid length.
[  106.356651][ T6945] vxlan0: entered promiscuous mode
[  106.360669][ T5883] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.363854][ T5883] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.366925][ T5883] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.370751][ T5883] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.185464][ T6963] loop3: detected capacity change from 0 to 1024
[  107.326566][   T26] hfsplus: b-tree write err: -5, ino 4
[  107.357375][ T5856] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  107.396650][ T6965] loop3: detected capacity change from 0 to 128
[  107.527579][ T5856] usb 3-1: Using ep0 maxpacket: 16
[  107.541136][ T5856] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  107.544921][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  107.549660][ T5856] usb 3-1: Product: syz
[  107.567494][ T5856] usb 3-1: Manufacturer: syz
[  107.571687][ T5856] usb 3-1: SerialNumber: syz
[  107.589481][ T5856] usb 3-1: config 0 descriptor??
[  107.642941][ T6967] loop3: detected capacity change from 0 to 2048
[  107.671332][ T6967] UDF-fs: error (device loop3): udf_read_inode: (ino 1312) failed !bh
[  107.695095][ T6967] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  107.721331][ T6967] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  107.729839][ T6967] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  107.742152][ T6967] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  107.747552][ T6967] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  107.766541][ T6967] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  107.772740][ T6967] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  107.802417][ T5856] usb 3-1: USB disconnect, device number 12
[  107.915124][ T6971] loop0: detected capacity change from 0 to 256
[  108.185657][ T6985] loop0: detected capacity change from 0 to 4096
[  108.190339][ T6985] EXT4-fs (loop0): Test dummy encryption mode enabled
[  108.195321][ T6985] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  108.199385][ T6985] System zones: 0-5
[  108.213646][ T6985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.279374][ T6985] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  108.390197][ T7000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.390'.
[  108.432447][ T6985] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  108.477893][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.627379][ T5314] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  108.777351][ T5314] usb 4-1: Using ep0 maxpacket: 32
[  108.781693][ T5314] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  108.785294][ T5314] usb 4-1: config 0 has no interface number 0
[  108.789980][ T5314] usb 4-1: config 0 interface 12 has no altsetting 0
[  108.795829][ T5314] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  108.800037][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.803541][ T5314] usb 4-1: Product: syz
[  108.805454][ T5314] usb 4-1: Manufacturer: syz
[  108.808929][ T5314] usb 4-1: SerialNumber: syz
[  108.821375][ T5314] usb 4-1: config 0 descriptor??
[  109.039268][ T5314] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  109.042974][ T5314] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  109.046084][ T5314] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  109.049975][ T5314] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  109.063877][ T5314] usb 4-1: USB disconnect, device number 7
[  109.685834][ T7021] netlink: 'syz.3.399': attribute type 3 has an invalid length.
[  109.735621][ T7025] loop3: detected capacity change from 0 to 1024
[  109.841613][ T3652] hfsplus: b-tree write err: -5, ino 4
[  110.037106][ T7040] capability: warning: `syz.0.408' uses deprecated v2 capabilities in a way that may be insecure
[  110.122419][ T7046] loop3: detected capacity change from 0 to 256
[  110.371317][ T7058] loop0: detected capacity change from 0 to 16
[  110.814026][ T7082] syzkaller1: tun_chr_ioctl cmd 35111
[  110.843057][ T7086] loop3: detected capacity change from 0 to 128
[  110.854739][ T7086] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.860700][ T7086] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  110.887576][ T6219] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  111.189801][ T5910] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  111.207462][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  111.207475][   T33] audit: type=1326 audit(1759353318.982:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  111.230028][   T33] audit: type=1326 audit(1759353318.982:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  111.243923][   T33] audit: type=1326 audit(1759353318.982:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.433" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  111.255103][   T33] audit: type=1326 audit(1759353318.982:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  111.265909][   T33] audit: type=1326 audit(1759353318.982:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  111.280428][   T33] audit: type=1326 audit(1759353318.982:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.433" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  111.291458][   T33] audit: type=1326 audit(1759353318.982:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  111.306497][   T33] audit: type=1326 audit(1759353318.982:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  111.320332][   T33] audit: type=1326 audit(1759353318.982:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.433" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  111.335749][   T33] audit: type=1326 audit(1759353318.982:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.2.433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  111.389430][ T5910] usb 1-1: unable to get BOS descriptor or descriptor too short
[  111.396176][ T5910] usb 1-1: not running at top speed; connect to a high speed hub
[  111.401437][ T5910] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.412613][ T5910] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  111.416201][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.419197][ T5910] usb 1-1: Product: syz
[  111.420853][ T5910] usb 1-1: Manufacturer: syz
[  111.422717][ T5910] usb 1-1: SerialNumber: syz
[  111.428433][ T5910] usb 1-1: selecting invalid altsetting 1
[  111.457460][  T793] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  111.609133][  T793] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  111.612680][  T793] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  111.617034][  T793] usb 4-1: config 0 has no interface number 0
[  111.619909][  T793] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 64
[  111.624529][  T793] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.630923][  T793] usb 4-1: config 0 interface 52 has no altsetting 0
[  111.635525][  T793] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  111.639411][  T793] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34
[  111.643014][  T793] usb 4-1: Product: syz
[  111.644862][  T793] usb 4-1: SerialNumber: syz
[  111.650673][  T793] usb 4-1: config 0 descriptor??
[  111.864188][  T793] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input9
[  112.034463][ T5910] cdc_ncm 1-1:1.0: SET_CRC_MODE failed
[  112.038723][ T5910] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed
[  112.060149][ T5910] usb 1-1: selecting invalid altsetting 1
[  112.062885][ T5910] cdc_ncm 1-1:1.0: bind() failure
[  112.073632][ T5910] usb 1-1: USB disconnect, device number 12
[  112.081751][  T793] usb 4-1: USB disconnect, device number 8
[  112.084000][    C0] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  112.988500][ T7113] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  112.991196][ T7113] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  113.488633][ T7123] syz.3.446 (7123) used greatest stack depth: 19192 bytes left
[  113.860125][ T7141] netlink: 48 bytes leftover after parsing attributes in process `syz.2.453'.
[  113.897362][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[  113.901291][ T7141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[  113.905532][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.453'.
[  114.577157][ T7153] loop2: detected capacity change from 0 to 40427
[  114.586244][ T7153] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  114.589644][ T7153] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  114.594652][ T7153] F2FS-fs (loop2): invalid crc value
[  114.643157][ T7153] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  114.656361][ T7153] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  114.658803][ T7153] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  115.486560][ T7183] loop2: detected capacity change from 0 to 128
[  116.116153][ T7201] binder: BC_ATTEMPT_ACQUIRE not supported
[  116.119130][ T7201] binder: 7200:7201 ioctl c0306201 2000000001c0 returned -22
[  116.163747][ T7203] tipc: Started in network mode
[  116.166049][ T7203] tipc: Node identity 32838b1387ce, cluster identity 4711
[  116.169373][ T7203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.172920][ T7203] syzkaller0: entered promiscuous mode
[  116.175227][ T7203] syzkaller0: entered allmulticast mode
[  116.194028][ T7203] tipc: Resetting bearer <eth:syzkaller0>
[  116.200030][ T7202] tipc: Resetting bearer <eth:syzkaller0>
[  116.210124][ T7202] tipc: Disabling bearer <eth:syzkaller0>
[  116.318004][ T5910] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  116.469423][ T5910] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  116.473640][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  116.478636][ T5910] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  116.485031][ T5910] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  116.489776][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.493158][ T5910] usb 4-1: Product: syz
[  116.494970][ T5910] usb 4-1: Manufacturer: syz
[  116.496942][ T5910] usb 4-1: SerialNumber: syz
[  116.501274][ T5910] usb 4-1: config 0 descriptor??
[  116.504863][ T7197] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  116.509143][ T7197] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  116.513515][ T5910] usb 4-1: ucan: probing device on interface #0
[  116.537483][ T5314] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  116.690231][ T5314] usb 3-1: config 1 interface 0 has no altsetting 0
[  116.695703][ T5314] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  116.699688][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.703151][ T5314] usb 3-1: Product: syz
[  116.705057][ T5314] usb 3-1: Manufacturer: syz
[  116.707125][ T5314] usb 3-1: SerialNumber: syz
[  116.927148][ T5314] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  116.936530][ T5314] usb 3-1: USB disconnect, device number 13
[  116.945539][ T5314] usblp0: removed
[  117.130774][ T5910] ucan 4-1:0.0 can0: registered device
[  117.324612][ T5910] ucan 4-1:0.0 can0: firmware string: unknown
[  117.333042][ T5910] usb 4-1: USB disconnect, device number 9
[  118.455172][   T33] kauditd_printk_skb: 11 callbacks suppressed
[  118.455187][   T33] audit: type=1326 audit(1759353326.252:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  118.539725][   T33] audit: type=1326 audit(1759353326.252:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  118.564242][   T33] audit: type=1326 audit(1759353326.272:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  118.730706][   T33] audit: type=1326 audit(1759353326.272:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  118.742510][   T33] audit: type=1326 audit(1759353326.272:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  118.753962][   T33] audit: type=1326 audit(1759353326.272:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  118.763090][   T33] audit: type=1326 audit(1759353326.272:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  118.776054][   T33] audit: type=1326 audit(1759353326.272:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8ec29 code=0x7ffc0000
[  119.671628][ T7248] loop0: detected capacity change from 0 to 32768
[  119.678506][ T7248] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.500 (7248)
[  119.741366][ T7248] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.745389][ T7248] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  119.783053][ T7251] loop3: detected capacity change from 0 to 32768
[  120.009895][ T7251] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  120.046992][ T7251] OCFS2: ERROR (device loop3): int ocfs2_validate_xattr_block(struct super_block *, struct buffer_head *): Extended attribute block #2304 has bad signature 
[  120.059861][ T7251] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  120.063882][ T7251] OCFS2: File system is now read-only.
[  120.066010][ T7251] (syz.3.501,7251,0):ocfs2_xattr_block_find:2831 ERROR: status = -30
[  120.082198][ T7248] BTRFS info (device loop0): enabling ssd optimizations
[  120.093282][ T7248] BTRFS info (device loop0): enabling free space tree
[  120.099547][ T6219] ocfs2: Unmounting device (7,3) on (node local)
[  120.154094][ T5846] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.311875][ T7286] loop3: detected capacity change from 0 to 64
[  120.314624][ T7286] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  120.320567][ T7286] BFS-fs: bfs_fill_super(): Last block not available on loop3: 4139327
[  120.657518][ T7289] binder: 7285:7289 ioctl c0306201 0 returned -14
[  121.020678][ T7292] loop2: detected capacity change from 0 to 512
[  121.052277][ T7292] EXT4-fs (loop2): 1 orphan inode deleted
[  121.055332][ T7292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.060839][ T7292] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.070466][ T3652] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  121.075528][ T3652] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u10:5: Failed to release dquot type 1
[  121.089210][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.264759][ T7299] loop2: detected capacity change from 0 to 4096
[  121.310786][ T7299] ntfs3(loop2): ino=1e, "file1" attr_set_size
[  121.578139][ T7322] loop3: detected capacity change from 0 to 256
[  121.653500][ T7322] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  121.745553][ T7322] exFAT-fs (loop3): failed to load alloc-bitmap
[  121.757268][ T7322] exFAT-fs (loop3): failed to recognize exfat type
[  122.043446][ T7327] netlink: 64 bytes leftover after parsing attributes in process `syz.0.522'.
[  122.815914][ T7337] loop3: detected capacity change from 0 to 256
[  122.873913][ T7339] loop2: detected capacity change from 0 to 512
[  123.710292][ T7350] can: request_module (can-proto-0) failed.
[  124.337716][ T5885] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  124.501465][ T5885] usb 4-1: config 7 has an invalid interface number: 34 but max is 0
[  124.504881][ T5885] usb 4-1: config 7 has no interface number 0
[  124.515174][ T5885] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35
[  124.519460][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.523353][ T5885] usb 4-1: Product: syz
[  124.525229][ T5885] usb 4-1: Manufacturer: syz
[  124.528569][ T5885] usb 4-1: SerialNumber: syz
[  124.751321][ T5885] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state.
[  124.755853][ T5885] dvb-usb: bulk message failed: -22 (2/0)
[  124.763567][ T5885] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  124.770029][ T5885] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19)
[  124.773358][ T5885] dvb_usb_cxusb 4-1:7.34: probe with driver dvb_usb_cxusb failed with error -22
[  124.782684][ T5885] usb 4-1: USB disconnect, device number 10
[  125.034835][   T33] audit: type=1326 audit(1759353332.832:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7378 comm="syz.0.543" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x0
[  125.124697][ T7387] loop2: detected capacity change from 0 to 128
[  125.141258][ T7387] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  125.151557][ T7387] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  125.178854][ T7387] fscrypt (loop2, inode 12): Mutually exclusive encryption flags (0x1a)
[  125.198278][ T5855] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  125.418139][ T7390] loop0: detected capacity change from 0 to 32768
[  125.422003][ T7390] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.547 (7390)
[  125.441324][ T7390] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.445705][ T7390] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  125.497457][  T793] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  125.518956][ T7398] loop3: detected capacity change from 0 to 32768
[  125.564547][ T7398] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  125.586188][ T7390] BTRFS info (device loop0): enabling ssd optimizations
[  125.589801][ T7390] BTRFS info (device loop0): enabling free space tree
[  125.610790][ T5846] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.616338][ T6219] ocfs2: Unmounting device (7,3) on (node local)
[  125.652098][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.656051][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.688485][  T793] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  125.703457][  T793] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  125.716802][  T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.750935][  T793] usb 3-1: config 0 descriptor??
[  125.893881][ T7425] program syz.3.555 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  126.166893][  T793] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xe
[  126.169659][  T793] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[  126.179055][  T793] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  126.334844][ T7436] loop3: detected capacity change from 0 to 32768
[  126.339954][ T7436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.559 (7436)
[  126.352285][ T7436] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  126.357110][ T7436] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  126.392249][ T7436] BTRFS info (device loop3): enabling ssd optimizations
[  126.395240][ T7436] BTRFS info (device loop3): enabling free space tree
[  126.438389][  T793] usb 3-1: USB disconnect, device number 14
[  126.444362][ T6219] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  126.983858][ T7476] evm: overlay not supported
[  127.157367][ T5314] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  127.240884][ T7480] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  127.384360][ T5314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.405175][ T5314] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  127.415994][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.424074][ T5314] usb 4-1: Product: syz
[  127.429849][ T5314] usb 4-1: Manufacturer: syz
[  127.434238][ T5314] usb 4-1: SerialNumber: syz
[  127.458045][ T5314] usb 4-1: config 0 descriptor??
[  127.496049][ T5314] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  127.511500][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.673147][ T5314] usb 4-1: USB disconnect, device number 11
[  128.011171][ T7490] loop0: detected capacity change from 0 to 512
[  128.077545][ T7490] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.577: casefold flag without casefold feature
[  128.087506][ T7490] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.577: couldn't read orphan inode 15 (err -117)
[  128.092804][ T7490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.150085][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.271412][ T7488] loop2: detected capacity change from 0 to 32768
[  128.303448][ T7488] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  128.306145][ T7496] loop3: detected capacity change from 0 to 4096
[  128.314332][ T7488] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  128.360059][ T7499] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.389476][ T7496] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  128.402870][ T7501] loop0: detected capacity change from 0 to 128
[  128.410219][ T7496] Remounting filesystem read-only
[  128.428484][ T7501] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  128.433321][ T7501] hpfs: filesystem error: improperly stopped
[  128.436116][ T7501] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  128.441052][ T7501] hpfs: You really don't want any checks? You are crazy...
[  128.444038][ T7501] hpfs: hpfs_map_sector(): read error
[  128.446070][ T7501] hpfs: code page support is disabled
[  128.450386][ T7501] hpfs: hpfs_map_4sectors(): unaligned read
[  128.459820][ T7501] hpfs: hpfs_map_4sectors(): unaligned read
[  128.460901][ T5855] ocfs2: Unmounting device (7,2) on (node local)
[  128.462141][ T7501] hpfs: filesystem error: unable to find root dir
[  128.724975][ T7511] loop2: detected capacity change from 0 to 128
[  128.735436][ T7511] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  128.745220][ T7511] hpfs: filesystem error: improperly stopped
[  128.748020][ T7511] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  128.752411][ T7511] hpfs: You really don't want any checks? You are crazy...
[  128.755476][ T7511] hpfs: hpfs_map_sector(): read error
[  128.758016][ T7511] hpfs: code page support is disabled
[  128.760289][ T7511] hpfs: hpfs_map_4sectors(): unaligned read
[  128.762977][ T7511] hpfs: hpfs_map_4sectors(): unaligned read
[  128.765207][ T7511] hpfs: filesystem error: unable to find root dir
[  128.843999][ T7514] futex_wake_op: syz.2.586 tries to shift op by -2048; fix this program
[  129.336180][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'.
[  129.353129][ T7525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.590'.
[  129.667530][ T7535] loop0: detected capacity change from 0 to 4096
[  129.702165][ T7535] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  129.713400][ T7535] ntfs3(loop0): Failed to load $Secure (-22).
[  129.715989][ T7535] ntfs3(loop0): Failed to initialize $Secure (-22).
[  129.809262][   T33] audit: type=1326 audit(1759353337.612:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.0.596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  129.828721][   T33] audit: type=1326 audit(1759353337.612:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.0.596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  129.838774][   T33] audit: type=1326 audit(1759353337.622:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.0.596" exe="/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  129.848620][   T33] audit: type=1326 audit(1759353337.622:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.0.596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  129.857178][   T33] audit: type=1326 audit(1759353337.622:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.0.596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  129.871000][   T33] audit: type=1326 audit(1759353337.622:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.0.596" exe="/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  129.877076][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'.
[  129.880327][   T33] audit: type=1326 audit(1759353337.622:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.0.596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  129.880366][   T33] audit: type=1326 audit(1759353337.622:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.0.596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70f98ec29 code=0x7ffc0000
[  130.553381][ T7565] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  130.663731][ T7569] netlink: 'syz.3.611': attribute type 4 has an invalid length.
[  130.681104][ T7569] netlink: 'syz.3.611': attribute type 4 has an invalid length.
[  131.640403][ T7577] loop0: detected capacity change from 0 to 32768
[  132.127289][ T5314] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  132.277337][ T5314] usb 4-1: Using ep0 maxpacket: 8
[  132.280665][ T5314] usb 4-1: config 0 has an invalid interface number: 239 but max is 0
[  132.283514][ T5314] usb 4-1: config 0 has no interface number 0
[  132.285793][ T5314] usb 4-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  132.290201][ T5314] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[  132.295192][ T5314] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  132.298487][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.301160][ T5314] usb 4-1: Product: syz
[  132.303023][ T5314] usb 4-1: Manufacturer: syz
[  132.304649][ T5314] usb 4-1: SerialNumber: syz
[  132.308032][ T5314] usb 4-1: config 0 descriptor??
[  132.310325][ T7585] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  132.492178][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.494295][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.516591][ T5314] ath6kl: Failed to submit usb control message: -71
[  132.521769][ T5314] ath6kl: unable to send the bmi data to the device: -71
[  132.524260][ T5314] ath6kl: Unable to send get target info: -71
[  132.538985][ T5314] ath6kl: Failed to init ath6kl core: -71
[  132.542265][ T5314] ath6kl_usb 4-1:0.239: probe with driver ath6kl_usb failed with error -71
[  132.555226][ T5314] usb 4-1: USB disconnect, device number 12
[  132.585592][ T7593] loop2: detected capacity change from 0 to 4096
[  132.590385][ T7593] ntfs3(loop2): Primary boot: invalid bytes per MFT record 12288 (3).
[  132.598474][ T7593] ntfs3(loop2): try to read out of volume at offset 0x1ffe00
[  132.856343][ T7603] loop0: detected capacity change from 0 to 16
[  133.087394][ T5314] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  133.247875][ T5314] usb 3-1: Using ep0 maxpacket: 16
[  133.306265][ T5314] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.313311][ T5314] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.318640][ T5314] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  133.335658][ T5314] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  133.343617][ T5314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  133.350935][ T5314] usb 3-1: SerialNumber: syz
[  133.380817][ T5314] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  133.587558][ T5314] usb 3-1: USB disconnect, device number 15
[  134.023576][ T7628] loop0: detected capacity change from 0 to 4096
[  134.032739][ T7628] EXT4-fs (loop0): Test dummy encryption mode enabled
[  134.040082][ T7628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.053917][ T7628] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.635: bg 0: block 232: padding at end of block bitmap is not set
[  134.076576][ T7633] loop3: detected capacity change from 0 to 2048
[  134.083008][ T7633] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  134.113455][ T5920] udevd[5920]: incorrect nilfs2 checksum on /dev/loop3
[  134.117309][ T7634] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.126334][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.292793][ T7645] loop0: detected capacity change from 0 to 512
[  134.296298][ T7645] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 0
[  134.321901][ T7648] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  134.568167][ T7655] loop2: detected capacity change from 0 to 32768
[  134.578484][ T7655] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  134.604086][ T5855] ocfs2: Unmounting device (7,2) on (node local)
[  135.154035][ T7686] loop2: detected capacity change from 0 to 131072
[  135.160299][ T7686] F2FS-fs (loop2): invalid crc value
[  135.189521][ T7686] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  135.192971][ T7686] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  135.333271][ T7700] loop0: detected capacity change from 0 to 764
[  135.867787][ T5885] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  135.904240][ T7723] loop2: detected capacity change from 0 to 256
[  135.923923][ T7723] FAT-fs (loop2): Directory bread(block 64) failed
[  135.926670][ T7723] FAT-fs (loop2): Directory bread(block 65) failed
[  135.931462][ T7723] FAT-fs (loop2): Directory bread(block 66) failed
[  135.934421][ T7723] FAT-fs (loop2): Directory bread(block 67) failed
[  135.937187][ T7723] FAT-fs (loop2): Directory bread(block 68) failed
[  135.940546][ T7723] FAT-fs (loop2): Directory bread(block 69) failed
[  135.943298][ T7723] FAT-fs (loop2): Directory bread(block 70) failed
[  135.946115][ T7723] FAT-fs (loop2): Directory bread(block 71) failed
[  135.951033][ T7723] FAT-fs (loop2): Directory bread(block 72) failed
[  135.953744][ T7723] FAT-fs (loop2): Directory bread(block 73) failed
[  136.040208][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short
[  136.048085][ T5885] usb 1-1: not running at top speed; connect to a high speed hub
[  136.054225][ T5885] usb 1-1: config 188 has an invalid interface number: 3 but max is 1
[  136.057751][ T5885] usb 1-1: config 188 has an invalid interface number: 9 but max is 1
[  136.061082][ T5885] usb 1-1: config 188 has no interface number 0
[  136.063612][ T5885] usb 1-1: config 188 has no interface number 1
[  136.066168][ T5885] usb 1-1: config 188 interface 3 has no altsetting 0
[  136.068926][ T5885] usb 1-1: config 188 interface 9 has no altsetting 0
[  136.074421][ T5885] usb 1-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=86.a0
[  136.080522][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.083783][ T5885] usb 1-1: Product: syz
[  136.085517][ T5885] usb 1-1: Manufacturer: syz
[  136.093190][ T5885] usb 1-1: SerialNumber: syz
[  136.234898][ T7731] loop2: detected capacity change from 0 to 1024
[  136.242566][ T7731] EXT4-fs: Ignoring removed orlov option
[  136.250292][ T7731] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  136.271196][ T7731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.310075][ T5885] usb 1-1: unknown number of interfaces: 2
[  136.314770][ T5885] usb 1-1: USB disconnect, device number 13
[  136.394992][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.554589][ T7745] loop3: detected capacity change from 0 to 256
[  136.564091][ T7745] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  136.574309][ T7745] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  136.580636][ T7745] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  136.583956][ T7745] UDF-fs: Scanning with blocksize 512 failed
[  136.589761][ T7745] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  136.595444][ T7745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.672715][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.682'.
[  136.676458][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.682'.
[  136.683108][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.682'.
[  136.686853][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.682'.
[  136.692979][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.682'.
[  136.696835][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.682'.
[  136.702464][ T7751] Zero length message leads to an empty skb
[  136.856062][ T7765] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.690'.
[  137.067425][ T7778] input: syz1 as /devices/virtual/input/input10
[  137.106677][ T7772] loop3: detected capacity change from 0 to 32768
[  137.116848][ T7772] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.152911][ T7772] XFS (loop3): Ending clean mount
[  137.192231][ T6219] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.741550][ T7794] loop2: detected capacity change from 0 to 512
[  137.747669][ T7794] EXT4-fs (loop2): Test dummy encryption mode enabled
[  137.761642][ T7794] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  137.772479][ T7794] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.698: bad orphan inode 131083
[  137.785392][ T7794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.811445][ T7794] overlayfs: upper fs needs to support d_type.
[  137.830957][ T5855] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /213/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  138.224467][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.302915][ T5864] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.363906][ T5864] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.384682][ T7812] loop0: detected capacity change from 0 to 256
[  138.387488][ T7812] msdos: Bad value for 'gid'
[  138.389034][ T7812] msdos: Bad value for 'gid'
[  138.495332][ T5864] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.727185][ T5864] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.829802][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  138.839310][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  138.843126][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  138.851165][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  138.854867][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  138.921493][ T5864] bridge_slave_1: left allmulticast mode
[  138.923416][ T5864] bridge_slave_1: left promiscuous mode
[  138.925354][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.930134][ T5864] bridge_slave_0: left allmulticast mode
[  138.932360][ T5864] bridge_slave_0: left promiscuous mode
[  138.936680][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.109432][ T5864] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  139.343670][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.349642][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.355653][ T5864] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  139.363856][ T5864] bond0 (unregistering): Released all slaves
[  139.793842][ T5864] tipc: Left network mode
[  140.042767][ T5864] hsr_slave_0: left promiscuous mode
[  140.046937][ T5864] hsr_slave_1: left promiscuous mode
[  140.054088][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.066916][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.071022][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.073855][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.161711][ T5864] veth1_macvtap: left promiscuous mode
[  140.165155][ T5864] veth0_macvtap: left promiscuous mode
[  140.169087][ T5864] veth1_vlan: left promiscuous mode
[  140.171523][ T5864] veth0_vlan: left promiscuous mode
[  140.800564][ T5864] team0 (unregistering): Port device team_slave_1 removed
[  140.822632][ T7847] loop0: detected capacity change from 0 to 32768
[  140.859524][ T5864] team0 (unregistering): Port device team_slave_0 removed
[  140.888534][ T5848] Bluetooth: hci2: command tx timeout
[  140.897876][ T7849] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  141.046755][ T7853] loop0: detected capacity change from 0 to 4096
[  141.330606][ T7859] loop0: detected capacity change from 0 to 1024
[  141.352379][ T7859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  141.389266][ T5846] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  141.421440][ T7815] chnl_net:caif_netlink_parms(): no params data found
[  141.621441][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.624797][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.628544][ T7815] bridge_slave_0: entered allmulticast mode
[  141.633366][ T7815] bridge_slave_0: entered promiscuous mode
[  141.639661][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.644211][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.647420][ T7815] bridge_slave_1: entered allmulticast mode
[  141.653136][ T7815] bridge_slave_1: entered promiscuous mode
[  141.698058][ T7815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.704440][ T7815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.740842][ T7815] team0: Port device team_slave_0 added
[  141.752988][ T7815] team0: Port device team_slave_1 added
[  141.785410][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.789861][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  141.799097][ T7815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.803937][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.806522][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  141.819492][ T7815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.828836][ T5885] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  141.868174][ T7815] hsr_slave_0: entered promiscuous mode
[  141.871323][ T7815] hsr_slave_1: entered promiscuous mode
[  141.874229][ T7815] debugfs: 'hsr0' already exists in 'hsr'
[  141.876564][ T7815] Cannot create hsr debugfs directory
[  142.008547][ T5885] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  142.011860][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.016074][ T5885] usb 4-1: config 0 has no interface number 0
[  142.031786][ T5885] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255
[  142.035921][ T5885] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  142.061426][ T5885] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  142.065224][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.077314][ T5885] usb 4-1: Product: syz
[  142.079079][ T5885] usb 4-1: Manufacturer: syz
[  142.081000][ T5885] usb 4-1: SerialNumber: syz
[  142.085654][ T5885] usb 4-1: config 0 descriptor??
[  142.090627][ T7872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  142.100023][ T5885] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  142.104628][ T7815] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  142.108682][ T5885] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  142.114537][ T7815] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  142.119332][ T5885] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  142.125935][ T7815] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  142.138829][ T7815] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  142.168377][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.170730][ T7815] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.173124][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.175410][ T7815] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.213536][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.226746][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.232998][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.250687][ T7815] 8021q: adding VLAN 0 to HW filter on device team0
[  142.266338][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.269403][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.279020][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.281541][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.301141][ T5885] usb 4-1: USB disconnect, device number 13
[  142.307761][ T5885] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  142.312132][ T5885] cyberjack 4-1:0.69: device disconnected
[  142.422154][ T7815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.537023][ T7815] veth0_vlan: entered promiscuous mode
[  142.542170][ T7815] veth1_vlan: entered promiscuous mode
[  142.563324][ T7815] veth0_macvtap: entered promiscuous mode
[  142.569128][ T7815] veth1_macvtap: entered promiscuous mode
[  142.579135][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.590070][ T7815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.599139][ T7920] netlink: 248 bytes leftover after parsing attributes in process `syz.0.731'.
[  142.603029][ T5864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.610419][ T5864] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.614488][ T5864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.630811][ T5864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.696395][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.705377][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.726921][ T3652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.740598][ T3652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.914852][ T7940] sctp: [Deprecated]: syz.3.736 (pid 7940) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.914852][ T7940] Use struct sctp_sack_info instead
[  142.920084][ T7941] loop0: detected capacity change from 0 to 256
[  142.938766][ T7941] exfat: Deprecated parameter 'namecase'
[  142.961692][ T7941] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  142.973521][ T5848] Bluetooth: hci2: command tx timeout
[  143.353833][ T7958] loop0: detected capacity change from 0 to 40427
[  143.366704][ T7958] F2FS-fs (loop0): invalid crc value
[  143.392599][ T7956] loop4: detected capacity change from 0 to 32768
[  143.443220][ T7958] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  143.449054][ T7958] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  143.544185][ T5846] syz-executor: attempt to access beyond end of device
[  143.544185][ T5846] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  143.559648][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  143.559668][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.559675][ T5846] Call Trace:
[  143.559681][ T5846]  <TASK>
[  143.559686][ T5846]  dump_stack_lvl+0x189/0x250
[  143.559707][ T5846]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.559722][ T5846]  ? __pfx_queue_work_on+0x10/0x10
[  143.559732][ T5846]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  143.559748][ T5846]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  143.559771][ T5846]  f2fs_handle_critical_error+0x37c/0x540
[  143.559790][ T5846]  f2fs_write_end_io+0x886/0xb60
[  143.559817][ T5846]  __submit_merged_bio+0x27a/0x6a0
[  143.559836][ T5846]  __submit_merged_write_cond+0x255/0x530
[  143.559861][ T5846]  f2fs_write_data_pages+0x261d/0x3000
[  143.559905][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  143.559955][ T5846]  ? folio_unqueue_deferred_split+0x93/0x230
[  143.559976][ T5846]  ? folios_put_refs+0x584/0x670
[  143.560000][ T5846]  ? __pfx_folios_put_refs+0x10/0x10
[  143.560016][ T5846]  ? rcu_is_watching+0x15/0xb0
[  143.560034][ T5846]  ? __lock_acquire+0xab9/0xd20
[  143.560063][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  143.560078][ T5846]  do_writepages+0x32e/0x550
[  143.560099][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[  143.560117][ T5846]  filemap_fdatawrite+0x199/0x240
[  143.560129][ T5846]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  143.560176][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[  143.560193][ T5846]  f2fs_sync_dirty_inodes+0x31f/0x830
[  143.560219][ T5846]  f2fs_write_checkpoint+0x93e/0x2440
[  143.560234][ T5846]  ? __lock_acquire+0xab9/0xd20
[  143.560271][ T5846]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  143.560324][ T5846]  kill_f2fs_super+0x2cc/0x6d0
[  143.560344][ T5846]  ? __pfx_kill_f2fs_super+0x10/0x10
[  143.560370][ T5846]  ? shrinker_free+0x2ce/0x3e0
[  143.560389][ T5846]  deactivate_locked_super+0xbc/0x130
[  143.560409][ T5846]  cleanup_mnt+0x425/0x4c0
[  143.560454][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.560471][ T5846]  task_work_run+0x1d4/0x260
[  143.560488][ T5846]  ? __pfx_task_work_run+0x10/0x10
[  143.560501][ T5846]  ? __x64_sys_umount+0x122/0x160
[  143.560517][ T5846]  ? exit_to_user_mode_loop+0x40/0x130
[  143.560536][ T5846]  exit_to_user_mode_loop+0xe9/0x130
[  143.560552][ T5846]  do_syscall_64+0x2bd/0xfa0
[  143.560566][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.560579][ T5846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.560591][ T5846]  ? exc_page_fault+0xab/0x100
[  143.560608][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.560619][ T5846] RIP: 0033:0x7fe70f98ff57
[  143.560631][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  143.560661][ T5846] RSP: 002b:00007fff7feff298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  143.560674][ T5846] RAX: 0000000000000000 RBX: 00007fe70fa11c2d RCX: 00007fe70f98ff57
[  143.560681][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7feff350
[  143.560688][ T5846] RBP: 00007fff7feff350 R08: 0000000000000000 R09: 0000000000000000
[  143.560696][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7ff003e0
[  143.560703][ T5846] R13: 00007fe70fa11c2d R14: 000000000002301c R15: 00007fff7ff00420
[  143.560724][ T5846]  </TASK>
[  143.561964][ T5846] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  143.821341][ T7980] loop3: detected capacity change from 0 to 256
[  143.836053][ T7980] exfat: Deprecated parameter 'namecase'
[  143.844143][ T7980] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  143.930481][ T7984] loop4: detected capacity change from 0 to 64
[  144.128432][ T7980] futex_wake_op: syz.3.748 tries to shift op by -1; fix this program
[  145.024390][ T8002] loop4: detected capacity change from 0 to 32768
[  145.057473][ T5848] Bluetooth: hci2: command tx timeout
[  145.166876][ T8024] loop4: detected capacity change from 0 to 256
[  145.178295][ T8024] exfat: Deprecated parameter 'namecase'
[  145.189548][ T8024] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[  145.217765][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  145.377462][    T9] usb 4-1: Using ep0 maxpacket: 16
[  145.382254][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.386335][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  145.392609][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  145.396382][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.399865][    T9] usb 4-1: Product: syz
[  145.401660][    T9] usb 4-1: Manufacturer: syz
[  145.403169][    T9] usb 4-1: SerialNumber: syz
[  145.428568][ T5856] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  145.587330][ T5856] usb 1-1: Using ep0 maxpacket: 16
[  145.591267][ T5856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.594749][ T5856] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  145.598025][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.603692][ T5856] usb 1-1: config 0 descriptor??
[  145.607936][ T5856] pxrc 1-1:0.0: Could not find endpoint
[  145.614307][    T9] usb 4-1: 0:2 : does not exist
[  145.625112][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  145.638229][    T9] usb 4-1: USB disconnect, device number 14
[  145.655372][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.811805][    T9] usb 1-1: USB disconnect, device number 14
[  146.243658][ T8032] loop3: detected capacity change from 0 to 256
[  146.260555][ T8032] FAT-fs (loop3): Directory bread(block 64) failed
[  146.263186][ T8032] FAT-fs (loop3): Directory bread(block 65) failed
[  146.266015][ T8032] FAT-fs (loop3): Directory bread(block 66) failed
[  146.269772][ T8032] FAT-fs (loop3): Directory bread(block 67) failed
[  146.273284][ T8032] FAT-fs (loop3): Directory bread(block 68) failed
[  146.276078][ T8032] FAT-fs (loop3): Directory bread(block 69) failed
[  146.279095][ T8032] FAT-fs (loop3): Directory bread(block 70) failed
[  146.281869][ T8032] FAT-fs (loop3): Directory bread(block 71) failed
[  146.284642][ T8032] FAT-fs (loop3): Directory bread(block 72) failed
[  146.289684][ T8032] FAT-fs (loop3): Directory bread(block 73) failed
[  146.395969][ T8038] loop0: detected capacity change from 0 to 128
[  146.687433][    T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  146.839209][    T9] usb 1-1: config 2 has an invalid interface number: 211 but max is 0
[  146.842486][    T9] usb 1-1: config 2 has no interface number 0
[  146.857392][    T9] usb 1-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  146.861871][    T9] usb 1-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  146.880708][    T9] usb 1-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95
[  146.884088][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.888451][    T9] usb 1-1: Product: syz
[  146.890169][    T9] usb 1-1: Manufacturer: syz
[  146.892061][    T9] usb 1-1: SerialNumber: syz
[  146.905652][ T8044] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  146.917053][    T9] em28xx 1-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211)
[  146.925182][    T9] em28xx 1-1:2.211: Device initialization failed.
[  146.925688][ T8069] loop3: detected capacity change from 0 to 1024
[  146.935326][    T9] em28xx 1-1:2.211: Device must be connected to a high-speed USB 2.0 port.
[  146.938082][ T8069] hfsplus: bad catalog entry type
[  146.965505][   T27] hfsplus: b-tree write err: -5, ino 4
[  147.125093][ T5910] usb 1-1: USB disconnect, device number 15
[  147.171779][ T8079] loop3: detected capacity change from 0 to 2048
[  147.183301][ T8079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.206710][ T8079] cifs: Unknown parameter 'norecovery'
[  147.228229][ T6219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.273067][ T8084] loop3: detected capacity change from 0 to 1024
[  147.290638][ T8084] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  147.320426][ T8084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.363589][ T8084] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.791: missing EA_INODE flag
[  147.380863][ T5883] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.390652][ T8084] EXT4-fs (loop3): Remounting filesystem read-only
[  147.411788][ T6219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.480218][ T5883] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.539500][ T5883] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.673531][ T5883] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.737103][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  147.743205][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  147.749311][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  147.753380][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  147.757108][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  147.925393][ T5883] bridge_slave_1: left allmulticast mode
[  147.929146][ T5883] bridge_slave_1: left promiscuous mode
[  147.931532][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.943657][ T5883] bridge_slave_0: left allmulticast mode
[  147.946084][ T5883] bridge_slave_0: left promiscuous mode
[  147.957592][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.046977][ T8093] loop3: detected capacity change from 0 to 32768
[  148.075229][   T33] audit: type=1800 audit(1759353355.872:51): pid=8093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.796" name="file1" dev="loop3" ino=4 res=0 errno=0
[  148.120274][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  148.289316][    T9] usb 1-1: config index 0 descriptor too short (expected 9087, got 127)
[  148.296004][    T9] usb 1-1: config 160 has too many interfaces: 181, using maximum allowed: 32
[  148.300503][    T9] usb 1-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config
[  148.304821][    T9] usb 1-1: config 160 has 2 interfaces, different from the descriptor's value: 181
[  148.309178][    T9] usb 1-1: config 160 has no interface number 1
[  148.311811][    T9] usb 1-1: config 160 interface 2 altsetting 1 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  148.324464][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  148.330896][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.334315][    T9] usb 1-1: Product: syz
[  148.336106][    T9] usb 1-1: Manufacturer: syz
[  148.338540][    T9] usb 1-1: SerialNumber: syz
[  148.398064][ T5883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.405712][ T5883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.414615][ T5883] bond0 (unregistering): Released all slaves
[  148.415131][ T8093] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root
[  148.415131][ T8093] 
[  148.423958][ T8093] ERROR: (device loop3): remounting filesystem as read-only
[  148.593437][    T9] usb 1-1: unknown interface protocol 0xbc, assuming v1
[  148.596375][    T9] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  148.601723][    T9] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  148.607450][ T6219] ------------[ cut here ]------------
[  148.609372][ T6219] kernel BUG at fs/jfs/inode.c:175!
[  148.629847][ T8096] chnl_net:caif_netlink_parms(): no params data found
[  148.631808][ T6219] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  148.634903][ T6219] CPU: 0 UID: 0 PID: 6219 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  148.638829][ T6219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.643010][ T6219] RIP: 0010:jfs_evict_inode+0x438/0x440
[  148.645321][ T6219] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 33 64 e6 fe e9 16 fe ff ff e8 d9 bb 80 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  148.653049][ T6219] RSP: 0018:ffffc90004b9fae0 EFLAGS: 00010293
[  148.655535][ T6219] RAX: ffffffff833fa027 RBX: ffff88802a7f68e8 RCX: ffff88801b7a9d00
[  148.658744][ T6219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802a7f68e8
[  148.662192][ T6219] RBP: 0000000000000001 R08: ffffffff8fc35977 R09: 1ffffffff1f86b2e
[  148.665560][ T6219] R10: dffffc0000000000 R11: ffffffff833f7c90 R12: dffffc0000000000
[  148.668888][ T6219] R13: dffffc0000000000 R14: ffff88802a7f6570 R15: ffffffff833f9bf0
[  148.672120][ T6219] FS:  0000555574aca500(0000) GS:ffff8880b83fc000(0000) knlGS:0000000000000000
[  148.675784][ T6219] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.678482][ T6219] CR2: 000055cbfcd98000 CR3: 0000000035d76000 CR4: 00000000000006f0
[  148.681764][ T6219] Call Trace:
[  148.683153][ T6219]  <TASK>
[  148.684388][ T6219]  ? evict+0x4f8/0x9c0
[  148.686031][ T6219]  ? __pfx_jfs_evict_inode+0x10/0x10
[  148.688168][ T6219]  evict+0x504/0x9c0
[  148.689714][ T6219]  ? __pfx_evict+0x10/0x10
[  148.691479][ T6219]  ? do_raw_spin_unlock+0x4d/0x240
[  148.693643][ T6219]  evict_inodes+0x64c/0x6d0
[  148.695562][ T6219]  ? __pfx_evict_inodes+0x10/0x10
[  148.697594][ T6219]  generic_shutdown_super+0x9a/0x2c0
[  148.699730][ T6219]  kill_block_super+0x44/0x90
[  148.701653][ T6219]  deactivate_locked_super+0xbc/0x130
[  148.703867][ T6219]  cleanup_mnt+0x425/0x4c0
[  148.705693][ T6219]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.707814][ T6219]  task_work_run+0x1d4/0x260
[  148.709760][ T6219]  ? __pfx_task_work_run+0x10/0x10
[  148.711649][ T6219]  ? __x64_sys_umount+0x122/0x160
[  148.713441][ T6219]  ? exit_to_user_mode_loop+0x40/0x130
[  148.715523][ T6219]  exit_to_user_mode_loop+0xe9/0x130
[  148.717583][ T6219]  do_syscall_64+0x2bd/0xfa0
[  148.719207][ T6219]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.721097][ T6219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.723387][ T6219]  ? exc_page_fault+0xab/0x100
[  148.725256][ T6219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.727703][ T6219] RIP: 0033:0x7f5384f8ff57
[  148.729470][ T6219] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  148.736791][ T6219] RSP: 002b:00007fffc1a34e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  148.739968][ T6219] RAX: 0000000000000000 RBX: 00007f5385011c2d RCX: 00007f5384f8ff57
[  148.742980][ T6219] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc1a34f20
[  148.745897][ T6219] RBP: 00007fffc1a34f20 R08: 0000000000000000 R09: 0000000000000000
[  148.749044][ T6219] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc1a35fb0
[  148.751793][ T6219] R13: 00007f5385011c2d R14: 00000000000243c4 R15: 00007fffc1a35ff0
[  148.754633][ T6219]  </TASK>
[  148.755855][ T6219] Modules linked in:
[  148.757729][ T6219] ---[ end trace 0000000000000000 ]---
[  148.767908][    T9] usb 1-1: USB disconnect, device number 16
[  148.779855][ T6219] RIP: 0010:jfs_evict_inode+0x438/0x440
[  148.785837][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.802945][ T6219] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 33 64 e6 fe e9 16 fe ff ff e8 d9 bb 80 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  148.818725][ T6219] RSP: 0018:ffffc90004b9fae0 EFLAGS: 00010293
[  148.820900][ T6219] RAX: ffffffff833fa027 RBX: ffff88802a7f68e8 RCX: ffff88801b7a9d00
[  148.823956][ T6219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802a7f68e8
[  148.826940][ T6219] RBP: 0000000000000001 R08: ffffffff8fc35977 R09: 1ffffffff1f86b2e
[  148.831885][ T6219] R10: dffffc0000000000 R11: ffffffff833f7c90 R12: dffffc0000000000
[  148.835021][ T6219] R13: dffffc0000000000 R14: ffff88802a7f6570 R15: ffffffff833f9bf0
[  148.838637][ T6219] FS:  0000555574aca500(0000) GS:ffff8881a39fc000(0000) knlGS:0000000000000000
[  148.842301][ T6219] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  148.845302][ T6219] CR2: 00007ffc99652ae8 CR3: 0000000035d76000 CR4: 00000000000006f0
[  148.849516][ T6219] Kernel panic - not syncing: Fatal exception
[  148.852685][ T6219] Kernel Offset: disabled
[  148.854263][ T6219] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:15:56  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffff88804b032fd8 RCX=f1d4cb31505b4600 RDX=0000000000000000
RSI=ffffffff8c03da40 RDI=ffffffff8c03da00 RBP=ffffffff81742d25 RSP=ffffc900031feaf8
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900031fecd8 R11=ffffffff81acd5f0
R12=0000000000000002 R13=ffffffff8e33d320 R14=ffffffff8ddc6dd0 R15=dffffc0000000000
RIP=ffffffff81a6f7ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f96d6da0256 CR3=0000000021bfc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fe70fa12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff1bb8dbb RBX=ffff888136632fd8 RCX=3bda2e126b5b4800 RDX=ffff88810da09d00
RSI=ffffffff8c03da40 RDI=ffffffff8c03da00 RBP=0000000000000001 RSP=ffffc9000305f090
R8 =0000000000000000 R9 =ffffffff81cf62e6 R10=ffffc9000305f198 R11=ffffffff81acd5f0
R12=ffff88810da09d00 R13=1ffff9200060be54 R14=ffffffff8ddc6dd8 R15=dffffc0000000000
RIP=ffffffff81a6f7de RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2dd7987800 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055cbfcd74000 CR3=0000000028f8e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
